5fc85e4419d8733b43b5ae25afb88fbd_JaffaCakes118 | Triage

Sharing

General

Target

5fc85e4419d8733b43b5ae25afb88fbd_JaffaCakes118
Size

70KB
MD5

5fc85e4419d8733b43b5ae25afb88fbd
SHA1

650b8906819e7b96b82a1788b58c5993c6b71c4a
SHA256

6c7c6101a3de28e0abbb30de69473479e28d518d67d122df5c0b64f1325cb637
SHA512

689b3195c7e79cdca6962911b9de3fe60d3e27ad19ba42e852e261d8b0e28e19aef2eb58b5f707ef21a23a1031adbd721f6b271642d0b518ae9710d46d6bc32d
SSDEEP

1536:ACGeHGDJz+grk1IfNvh1NWgywTFZKKydVYHg9S:AjR+o4gFhZKwg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc85e4419d8733b43b5ae25afb88fbd_JaffaCakes118

Files

5fc85e4419d8733b43b5ae25afb88fbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6c154a91c8cb9c8e203cda938b41481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
SetProcessWorkingSetSize
WriteConsoleA
lstrcmpA

advapi32

AbortSystemShutdownA

ole32

IsEqualGUID
IsValidIid
IsValidPtrOut

setupapi

SetupDiSetDeviceRegistryPropertyA

olepro32

OleIconToCursor
OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame

user32

IsDlgButtonChecked
PostThreadMessageA
ToUnicode
GetKeyboardType

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ