5fe553200da319e4ae571ff0ff20d625_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fe553200da319e4ae571ff0ff20d625_JaffaCakes118
Size

340KB
MD5

5fe553200da319e4ae571ff0ff20d625
SHA1

da01a0141707e24071aacd2d6a3b7e3e6882f112
SHA256

85467aa6fe5b11cd941f1ccccfeb62510fbd16ac926c8ae78a97c50048c7f219
SHA512

c497a1123bed22f15f645dcf187f8f3b671142355dace39b92182eb2db0bba97ab1f6dca82c9c9a95d1b41ca0a09b60ff108f37fbf9132f6b459586f3649ba4f
SSDEEP

6144:g28Pyi3t3kTZOCrcnSk/e7i6Vzsf2WaHWOSf2ly5:g8i9Gaf8LFefmy5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fe553200da319e4ae571ff0ff20d625_JaffaCakes118

Files

5fe553200da319e4ae571ff0ff20d625_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d84aa3056e5711ee6b542ce39eb7c59a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetCurrentThreadId
ResumeThread
GetCommandLineA
VirtualFree
VirtualLock
VirtualAlloc
OpenSemaphoreA
GetProcAddress
GetModuleHandleA
Sleep
TlsGetValue

user32

InSendMessage
UpdateWindow
LoadCursorA

advapi32

CryptAcquireContextA
CryptGenKey

ole32

CoUninitialize

avifil32

AVIBuildFilterA
AVIStreamBeginStreaming

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 771KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ