5f81a60f17ad59449d20948fd00b030a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f81a60f17ad59449d20948fd00b030a_JaffaCakes118
Size

144KB
MD5

5f81a60f17ad59449d20948fd00b030a
SHA1

9597f8acfe8cf3d8b7979d9e0d33617fe33940b9
SHA256

1c938722a65e3e5d7ad5dc326aebe693365002563757f735e6f933a4e49a74ef
SHA512

31991b11850d13b8baf74f2e42986794b3582331372e6e39eda22e684909f2b94327712de8ca90be3f483b12ff6f2bc9168574e9855eae3ec3f115d8f28a9511
SSDEEP

3072:4wvYcD2rRFM81mZMgbmcsR7Ix0ezk5M2Xvd4MVvkhSG+9i/s4aDxQ:0K80OVS9U/fkhy3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f81a60f17ad59449d20948fd00b030a_JaffaCakes118

Files

5f81a60f17ad59449d20948fd00b030a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

37331a4520f48db0f55c67e09aa2b7d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

gdi32

SetTextAlign
MoveToEx

comctl32

CreatePropertySheetPageA

version

GetFileVersionInfoSizeA

shell32

SHGetFileInfoA

ole32

CoSetProxyBlanket

msvcrt

_acmdln
_exit
__setusermatherr
_XcptFilter
exit
_initterm
__getmainargs
_findfirsti64
__p__fmode
memcpy
__set_app_type
_controlfp
_adjust_fdiv
__p__commode
_except_handler3

user32

SystemParametersInfoA

kernel32

HeapAlloc
GetStartupInfoA
HeapCreate
VirtualFree
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ