5fefc64e52e30e6be334a56ad9df5af6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fefc64e52e30e6be334a56ad9df5af6_JaffaCakes118
Size

130KB
MD5

5fefc64e52e30e6be334a56ad9df5af6
SHA1

d12ffecf73c3b070b62b21f71f66a18a3957fcc3
SHA256

2dc73905747c15a99ace92c7b7de74285af8e10c0902f0a7044269ca00888c29
SHA512

164b418240eab046d073b34e302a903ced1fd72b1020b0e87180c137d8c19f93d4cc5d62e409f609d76ae584fd578143135b8d0509d6197a7b8ee99d8a74275a
SSDEEP

1536:dlksNDfPwdUS8hss0wmDzHOAvYwxQHpyIXiSNKqZvHMkmPlPqSuIhXjPB:dpDfA/YslXO3+QHpbiSNKqxuuIhXd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fefc64e52e30e6be334a56ad9df5af6_JaffaCakes118

Files

5fefc64e52e30e6be334a56ad9df5af6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

badc44e5153ccf64c9865cd886071d0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetModuleHandleA
VirtualProtect
CloseHandle
TlsGetValue
ExitProcess
GetLastError
Sleep
DeleteCriticalSection
GetTickCount
FindResourceExA
CreateThread
GetDiskFreeSpaceA
ReleaseMutex
FindAtomA
FindClose
SetEvent
SearchPathA
GetCalendarInfoA
FindVolumeClose

user32

EnableWindow
GetUpdateRect
GetMessageA
DispatchMessageA
CreateWindowExA
DragDetect
GetKeyState
EndDialog
CopyImage
DialogBoxParamA
IsIconic
GetScrollBarInfo
CloseWindow
CreateMenu

msdmo

DMORegister
DMOEnum
DMOUnregister
DMOGetTypes
DMOGetName

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ