5f7acfc3f73851f71c57dc8c456f67e9_JaffaCakes118 | Triage

Sharing

General

Target

5f7acfc3f73851f71c57dc8c456f67e9_JaffaCakes118
Size

108KB
MD5

5f7acfc3f73851f71c57dc8c456f67e9
SHA1

7473892e888cee4adf18d79f620b03731acde5e9
SHA256

4d8b73a13fe6dcda03178ff40a9df17b13836077f25f4817e1c1da6d509c3ce2
SHA512

21981e92d8e86a3e8364967cc958e577051b008993bf175c4f002a5332a0fb763cb664e3d28197d5eb6520223d67a2bdfdcaa84a091751fe4f30ef835133ccf2
SSDEEP

1536:KGxnN7Og8qXWVCVn/Uy18vjfYw2q1T4F0f:KmhB8qXWm/lNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f7acfc3f73851f71c57dc8c456f67e9_JaffaCakes118

Files

5f7acfc3f73851f71c57dc8c456f67e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d12d49648bec59edb4d3380a3d99d3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
OpenProcess
GetModuleHandleA
GetProcAddress
CreateRemoteThread
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
WriteFile
CreateFileA
WaitForSingleObject
CreateProcessA
GetStartupInfoA

msvcrt

sprintf
strncpy
strncmp
atoi
_ftol
_CIfmod
_CIpow
modf
_strnicmp

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE