5f5682af978b24268379040438283b5f_JaffaCakes118 | Triage

Sharing

General

Target

5f5682af978b24268379040438283b5f_JaffaCakes118
Size

24KB
MD5

5f5682af978b24268379040438283b5f
SHA1

b87cb4f4330a3604cfc420b2d043f1f3e13dd6d3
SHA256

5cd665a54068dbaf0ac2e542e53e433ba7372a4cbed07e79c90282b7a1957548
SHA512

948e9f39779de0561928d4a2f22159b080ecef39ac9f531d52af2b2d1a9b463270c9c904b1f1b95d9d216455af4d747fdd9f05baf7a830f54e11275032da4e2e
SSDEEP

192:KoKf3RfYFO699B88daSwSmZBdZDtxYpQPp0KNrQXciO5eyOqIqHZA3wfZdyyS7LF:sJSGSmlHxVxz5acFyySfh7v6hjo2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f5682af978b24268379040438283b5f_JaffaCakes118

Files

5f5682af978b24268379040438283b5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57c361c520deda03609a1be20af2e674

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetCommandLineA
CopyFileA
LCMapStringW
GetStringTypeA
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

RegisterClassA
DefWindowProcA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE