f0452dc74120a672156bebc281eb62d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0452dc74120a672156bebc281eb62d9_JaffaCakes118
Size

123KB
MD5

f0452dc74120a672156bebc281eb62d9
SHA1

4d2e5a7a32a8eeb216e15ae9693c180bed7defcb
SHA256

f9ef7025c67fd88f7753b972a4a6a2d65d7660aa781a552e20a0e5457e6946bd
SHA512

77ed4f6a335a1d578916c44bce57d3f82a6c58e8ca48d8bb36732c0e598a23df787ef69c6ab363ba598938db8d7e784049b154052a59b3ba3670c50db5b843f5
SSDEEP

3072:7srQAzf1KHuSRJ9jsuI/TW73XFAeDttdb4vkMQirl:7srBf1KHu6IrAeqdb4vkMTrl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0452dc74120a672156bebc281eb62d9_JaffaCakes118

Files

f0452dc74120a672156bebc281eb62d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db6fbc8120454f24ee59a5dd28956fc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

occache

FindControlClose

kernel32

LockResource
GetTempPathA
LockResource
FindClose
CreateFileMappingW
SetFilePointer
SetEndOfFile
FindFirstFileA
GetModuleFileNameA
GetSystemInfo
UnmapViewOfFile
EnumResourceNamesW
VirtualQueryEx
FindNextFileA
ExitProcess
GetCurrentProcess
GetFileAttributesA
CreateFileA
FindResourceW
SizeofResource
MapViewOfFile
ReadFile
CloseHandle

ole32

CoFileTimeNow
CoUninitialize
StgOpenStorage
CoCreateInstance
CoInitialize

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ