a5cb19c5ccc958103bf7d5a302e53cd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5cb19c5ccc958103bf7d5a302e53cd9_JaffaCakes118
Size

404KB
MD5

a5cb19c5ccc958103bf7d5a302e53cd9
SHA1

1ff584e78026cfd95d690fad20bf9df0c17de3c6
SHA256

f3c8983ba7a3b76e683a9cf00b3d1eb0dcc5675f673f21a0b7e2458af56d8105
SHA512

6db63ad54aa4308a859145dc93e118d119eccf34aca1d015d15b977606d816d940b5e1365add53d61526ddd637d42acddc4521caecf1c1714a8c77dd64d86f5d
SSDEEP

12288:FnfZA3sMXKnvkzOVB6TomrgHlRqMvJ1HU0mGh2c:NRWvtO+TomrsqMPP2c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5cb19c5ccc958103bf7d5a302e53cd9_JaffaCakes118

Files

a5cb19c5ccc958103bf7d5a302e53cd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a8717af4afb0642e4b515f6381de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId

user32

IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect

gdi32

PatBlt

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ