d5515f798f895cf4effa6309d021640c_JaffaCakes118 | Triage

Sharing

General

Target

d5515f798f895cf4effa6309d021640c_JaffaCakes118
Size

89KB
MD5

d5515f798f895cf4effa6309d021640c
SHA1

60af9450b41956dfe274e96e1144c130789b7529
SHA256

c3a21c668106ef98498a739a7d052318642a6b4c54c2677e244e2bb5e2105b17
SHA512

0e23877677d2137885cf537b09d4c8f72c1c577a5059ca0974d00d902f56438452c66086b54ea5a98c8bcbcee49ff73712eff5c940a3388d55947ecdd6a7fc2f
SSDEEP

1536:t/3Q/LcCs4Y4aPLSH79jlD7/OcvtvOHliRnF+h3qXQlUphq0YO17AlDMfP8nynjQ:ZA/LJgSJl3nvtvOFiRnFe3fUphqCudtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5515f798f895cf4effa6309d021640c_JaffaCakes118

Files

d5515f798f895cf4effa6309d021640c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8a013f1b72c406f69770fbda09b7b80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetWindowsDirectoryA
GetVersionExA
GetCurrentThread
CreateEventA
GetCurrentProcess
GetCurrentThreadId
GetComputerNameA
CreateMutexA
LocalFree
ExitProcess
SleepEx
GetSystemDirectoryA
VirtualAlloc
LocalAlloc
GetStdHandle
GetCurrentDirectoryA

advapi32

GetUserNameA

user32

GetSystemMetrics
GetForegroundWindow
GetActiveWindow

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ