5f7eb2375f5e2559eee8bac4e370c6c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f7eb2375f5e2559eee8bac4e370c6c0_JaffaCakes118
Size

440KB
MD5

5f7eb2375f5e2559eee8bac4e370c6c0
SHA1

93ccecf179e40d98b0e4b46b024e92b0167c2bad
SHA256

64a2775c25a20df283c98fa58b42a619d1fc915dc01225ddde65982de79341ba
SHA512

5e0862a48d4afcf79c8caeef9ce7265b05a6507fe4eccbc7eb672c58406c70757a725743e1d108c583a6d2e757d0077040722fa552c96fe71988973c49376797
SSDEEP

6144:rpOmlmZtauLUVVqrDRBjdM1homBZ2+jeIM:rpO8YwuLrdBjdM1hd2DIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f7eb2375f5e2559eee8bac4e370c6c0_JaffaCakes118

Files

5f7eb2375f5e2559eee8bac4e370c6c0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

240890a13eaae031279b53a7c8064a56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA
PathAddExtensionA

kernel32

LoadLibraryA
VirtualProtect
CreateFileA
ExitProcess
GetProcAddress
VirtualFree
VirtualAlloc

user32

GetMessageA
GetForegroundWindow
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 432KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ