5fcdc6c00a4e33061ac3cd4bb4ec55f7_JaffaCakes118 | Triage

Sharing

General

Target

5fcdc6c00a4e33061ac3cd4bb4ec55f7_JaffaCakes118
Size

33KB
MD5

5fcdc6c00a4e33061ac3cd4bb4ec55f7
SHA1

81ef4b33d770b1a3a80302f5b75455f112190960
SHA256

91716ece1af1a9521b3ba0903bf52bf9956db93c84e1b646aae97b0b8084b128
SHA512

bec833abd35dd12e2a61051b7bace9d275449903726efe88667f38506027741929b84d5aa57fdbbfe87753559432c32d3d4a15bfb6bb63a5ab9fbff0475bb709
SSDEEP

384:SiANrh9TbMGQ/Nynk/+0lj06JS7gP9ySN0mRebnOD7woU4e6Z1+GJLsuJ:c/YsnWj0mS7gPMSNdIADVe61rguJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fcdc6c00a4e33061ac3cd4bb4ec55f7_JaffaCakes118

Files

5fcdc6c00a4e33061ac3cd4bb4ec55f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a36bc63a9278f1003d7431759ee7954d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA

kernel32

GetStartupInfoA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 831B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE