5fd0425eaa0775bfcdd5615637eab952_JaffaCakes118 | Triage

Sharing

General

Target

5fd0425eaa0775bfcdd5615637eab952_JaffaCakes118
Size

309KB
MD5

5fd0425eaa0775bfcdd5615637eab952
SHA1

06858f8a31bd339f0a9f872d35b23c02d64435e8
SHA256

6433d9ce6c60db4cf1fc329567d5433395053e798a6af085648440e8badafa17
SHA512

6ad0670627e0be08c2983b7b3515d066346f315bcf494bb187abeca1238c4f3f60ffabadbb02ff655a3d0b48d2863b162a10b6e31c968e8db28c4946f31532fa
SSDEEP

6144:q9RciFK2y6nl2KuSyJnuAQ0Fj6QiwqFauz1rMegOCTuRn:ORzFKmnl2KGnuAPFjdTqX1oZTk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd0425eaa0775bfcdd5615637eab952_JaffaCakes118

Files

5fd0425eaa0775bfcdd5615637eab952_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22a93253eb98b5a8ae73d8f0df1ec83e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetProcAddress
PulseEvent
GetModuleHandleA
VirtualAlloc
GetProcessHeap
GetTempFileNameA
ResetEvent

user32

UpdateWindow
ShowWindow

gdi32

CreateHatchBrush

shell32

DuplicateIcon

ole32

CoInitialize

netapi32

NetDfsAddFtRoot

avifil32

AVIPutFileOnClipboard

msvfw32

DrawDibRealize

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE