a5ab87b8ea27cc7b1d3abd227c061136_JaffaCakes118 | Triage

Sharing

General

Target

a5ab87b8ea27cc7b1d3abd227c061136_JaffaCakes118
Size

106KB
MD5

a5ab87b8ea27cc7b1d3abd227c061136
SHA1

a05105d1ef348155d21b1593aacb511b0a3ddb63
SHA256

04b2821724ae58ae9e3beb624da6a9e3b587a8edd831a07e14e4424d36eff7ac
SHA512

a7a9d9fbe51f522a93b3ed397f55b34d2bab9baf73984c6b108cb671ebcbc33907000bc6eea8582e6b455b91c9928f649486848c0744bdf99406b9a3e1beab94
SSDEEP

1536:VA1l7paq2rk7JaBTCijo2MmZjM/vFwUwjla5iHFosYmHQKWN3ZAX4VUCJawRfA:VAcbw7I/zMnFdwjlgSAmHQKXgJ/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ab87b8ea27cc7b1d3abd227c061136_JaffaCakes118

Files

a5ab87b8ea27cc7b1d3abd227c061136_JaffaCakes118
.exe windows:4 windows x86 arch:x86

764e46b4e886fb56ad221fd03be8b7a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdePostAdvise
CascadeWindows
ClientToScreen

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE