54f85b8d5627eba67da6a5f3501524f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54f85b8d5627eba67da6a5f3501524f9_JaffaCakes118
Size

44KB
MD5

54f85b8d5627eba67da6a5f3501524f9
SHA1

d35146ecc2cba0d4f09e11f94ff8a7200af6afe9
SHA256

05de943c9dc5b35d1ded8d66ca4d4bb4d77416a45b1c15f7be67d231015ceca0
SHA512

03b828f24348f76a623f4c5f2e83d8a55dd0a6cc6d7ba3fc067a3f68ee1188e39786422d08090a38a922b7043604b17c08e22ae7411ef69832977decca51adfc
SSDEEP

768:u/caMyXPpXv3gIMyMJADWf3uqEXjCafKQZodzLGPFms1zwl/1lA:uOyfNgIMyiAKf3cCaZodnseA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54f85b8d5627eba67da6a5f3501524f9_JaffaCakes118

Files

54f85b8d5627eba67da6a5f3501524f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fc56bebadc33fe562c6c09e0d41cb13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetMapMode
RectVisible
CloseMetaFile
Pie
CreatePenIndirect
CopyEnhMetaFileW
CreateRectRgn
GetTextCharsetInfo

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

_unlock
_wcsicmp
_CxxThrowException
atoi
__set_app_type
towlower
strstr
_write
_wtol

kernel32

GlobalHandle
InitializeCriticalSection
SetEvent
GetShortPathNameW
ExitProcess
GetSystemDirectoryA
VirtualAlloc

advapi32

RegQueryInfoKeyW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE