5fa0c9f9cfeea6cf07a6e1455bdf3733_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa0c9f9cfeea6cf07a6e1455bdf3733_JaffaCakes118
Size

397KB
MD5

5fa0c9f9cfeea6cf07a6e1455bdf3733
SHA1

0285e1d3daf5d94012750c5dc8034e344de5da2c
SHA256

68c9162b4cb0ac8547a2c1d8473663bb13c974cc9c01a5ed8ba38a754310048c
SHA512

22907de5ff35649ff446cdb02892024ecb443680729ca30d6b342d3955907addcfddd22bb9d9e5d92b26a1a92d2d1f5a97bb43541db8a9b90a800ce322d05b80
SSDEEP

6144:JQzOk1Ba5tv76kcwXUR0Jyoe7gVbXt72DUXw0ye2n8W5brMjlYrBh8Zo+:JQzm5d73dC7gVJ2V42n/5MjlI0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa0c9f9cfeea6cf07a6e1455bdf3733_JaffaCakes118

Files

5fa0c9f9cfeea6cf07a6e1455bdf3733_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e9a3c50dec7ad04acc58afdd4c752832

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
TerminateProcess
TlsGetValue
TlsSetValue
GetLocaleInfoA
GetACP
InterlockedDecrement
GetSystemInfo
SetEndOfFile
LZDone
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
RtlUnwind
ExitProcess

user32

wsprintfA
ReleaseCapture
PostMessageA
GetWindowPlacement
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ