5439d38ecb6b03053a7fb1f631ee8e37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5439d38ecb6b03053a7fb1f631ee8e37_JaffaCakes118
Size

120KB
MD5

5439d38ecb6b03053a7fb1f631ee8e37
SHA1

a0742c3a4c58165c1c5d3ab0ebba2d499de1d0fe
SHA256

1478caace0feb8e7d8d95727a1478be7a11fa3c77132aa6fb8abb04a288f6ba9
SHA512

78ef3eb522884269569846f69a02c865560f021162353a7fddf76ef0cd284d534281aaa2e0f4c53dc51820b7c44b2d6c928a96c0189e1df3cd827c05d18d23c5
SSDEEP

1536:oebV+39BVZ/GRYdpUETdNRkH3X9BPiWU1hZrPLszsVZM5BbbQnrrT9mAcZknO:ZbU91/fXR2ncn4ngrHEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5439d38ecb6b03053a7fb1f631ee8e37_JaffaCakes118

Files

5439d38ecb6b03053a7fb1f631ee8e37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0413f6f9954894db815d1ab1c7862cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
SetEnvironmentVariableA
GetFileAttributesW
CreateFileMappingA
WaitForSingleObject
GetProcAddress
LocalAlloc
CompareStringA
GetSystemDirectoryW
GetFileAttributesA
GetModuleHandleW
GlobalHandle
VirtualProtect
CompareFileTime

msvcrt

_controlfp
_adjust_fdiv
__getmainargs
atan2
__set_app_type
free
__p___initenv
__p__fmode
_except_handler3
calloc
_exit
_initterm
__p__commode
_XcptFilter

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE