5fa8677fdfb1f1468ce378b21d987cf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa8677fdfb1f1468ce378b21d987cf2_JaffaCakes118
Size

62KB
MD5

5fa8677fdfb1f1468ce378b21d987cf2
SHA1

7af293ae93e1e637dea118e5dfd6fc421a86943d
SHA256

4c12cf6d196cc3b37aa6d1fca1233ddb5b527a921faa77ff8cd908826a8a6478
SHA512

7b3430e9b7fb5ff901f78c7cbf4b5bc63757d04a4a1cd63035ae843d4e600441d40af594e849ee0af99917e5f5f71c30f16a7cd1466f70b8b27287c66e0a9934
SSDEEP

1536:BmvSGY+ZuMAmQQtVQIMLb4fXyWA6q2JNHFxRH4oXluTQKM:BaMiGOQIkkfXtrnJtyoX88

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa8677fdfb1f1468ce378b21d987cf2_JaffaCakes118

Files

5fa8677fdfb1f1468ce378b21d987cf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb7a4932d1b3c4321b977aac3ceb86b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE