5fd641d05fb1a707fa751764e58e030a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fd641d05fb1a707fa751764e58e030a_JaffaCakes118
Size

115KB
MD5

5fd641d05fb1a707fa751764e58e030a
SHA1

45a04a108ebaa2070bad32d27399bb9d8e056b8c
SHA256

a671f35b2a2ed0894971e95f64d1d2d1c4875153a2253e4ad353ee728f993242
SHA512

9e7c2ad507fac33e31b72c76e0de8c3dbd8ae7c4b817f15d420294cffb417306f96c799b9234e794973c1d917a7e06cb2ff28392fd0e918e658fd74b361e7f97
SSDEEP

1536:svnppfjzTAyDWvxOSmRsOeslpUXDKMj3WW1DZyX4TDI3xF8blSk:svnppfjzTAyDWJOSKswpCB7CSIuz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd641d05fb1a707fa751764e58e030a_JaffaCakes118

Files

5fd641d05fb1a707fa751764e58e030a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b54a587227642ebb3f1a47cd2770d25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerFindFileA

shell32

SHGetFolderPathA
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetFileInfoA
SHFileOperationA

shlwapi

SHQueryValueExA

gdi32

GetCurrentPositionEx
RestoreDC
GetRgnBox
CreatePalette
CreateDIBitmap
GetBitmapBits
CreateCompatibleBitmap

kernel32

GetVersion
MoveFileExA
GlobalAlloc
ExitThread
CreateThread
FormatMessageA
GetCommandLineA
lstrlenA
SetThreadLocale
GetModuleHandleA
GetEnvironmentStrings
GetProcAddress
GetStartupInfoA
CompareStringA
HeapDestroy
LocalReAlloc
GetFileType
VirtualAllocEx

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE