5fafe2bc7d811c5c32430068030c3dcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fafe2bc7d811c5c32430068030c3dcb_JaffaCakes118
Size

56KB
MD5

5fafe2bc7d811c5c32430068030c3dcb
SHA1

cd784f38fd8486ea9629d97c904fc528b5e7648a
SHA256

d47018ee1b849bbbda4ea0aa025b6e628ded882b02c47c71392fb2b2413bac1b
SHA512

5f8cbcb3b408d260efc906c2809fe6d763720be61752e1b43076b7e3a03bc19bdea437ec6e9bd152a8a8cc319b5cf0b97b3794217af95ab150be5a559a749f31
SSDEEP

768:BKfIgomQD+nAMhD+ckDmSZb2hCzGGlEKVzKlgahMi+9/pX+aJYQ:BblD+nXhD+75pDHj+aJi+9/gaiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fafe2bc7d811c5c32430068030c3dcb_JaffaCakes118

Files

5fafe2bc7d811c5c32430068030c3dcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054e745712bb1f342b24366ac0ee15f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
HeapAlloc
GetProcessHeap
VirtualAlloc
CancelTimerQueueTimer
lstrcmpiA
ExitProcess
GetModuleHandleA
WriteConsoleInputW
SizeofResource
IsBadReadPtr
CreateFiberEx
GetDateFormatA
UpdateResourceA
LoadLibraryA
GetStartupInfoA

user32

DefDlgProcA
CreateIcon

gdi32

GetMetaRgn

advapi32

LsaFreeMemory
GetServiceDisplayNameA
StartServiceW
ChangeServiceConfig2A

msvcrt

_chkesp
memcpy
memset
free
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Exports

Exports

jftphn
tqakis
wravqyc

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE