f0c7b31b7254f2ee0361bd340138df0a_JaffaCakes118 | Triage

Sharing

General

Target

f0c7b31b7254f2ee0361bd340138df0a_JaffaCakes118
Size

716KB
MD5

f0c7b31b7254f2ee0361bd340138df0a
SHA1

34f83a782281554164512db21b994b1e854d615e
SHA256

b0fd07448d90cd2488672c64f66a73694e3c314fd9654d558419dc0be7e726f0
SHA512

9f1b41893fea993cc2732e1e61cdb1792b449a3e15868502cd094d043b8110bff94ca34f57b9caf1b0444177c469bed3cb397507f8bce172063a49ed7d611a19
SSDEEP

12288:RfAy9lKdgloXObNEnaOlKHhGt5uYgiVzvX2C8prlp4FJp7rqCl4jDoHdJ1gnugMe:dlKOlBbNPTmDXE5lpkfQoSoeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0c7b31b7254f2ee0361bd340138df0a_JaffaCakes118

Files

f0c7b31b7254f2ee0361bd340138df0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c92aea2f226de6e14a500ff7a8cf4a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
GetVersion
HeapAlloc
InitializeCriticalSection
MultiByteToWideChar
OpenFile
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
VirtualAlloc
VirtualFree
lstrcpynA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ntdll

NtMapViewOfSection
NtNotifyChangeKey
RtlEnterCriticalSection
RtlFreeUnicodeString
RtlInitString
RtlInitUnicodeString
RtlLeaveCriticalSection
RtlNtStatusToDosError
wcscpy
NtDuplicateObject
NtCreateEvent

rpcrt4

NdrGetUserMarshalInfo
NdrInterfacePointerMarshall
RpcServerUseAllProtseqsIfEx
NdrComplexStructUnmarshall
NdrGetBuffer
NdrDllUnregisterProxy

crtdll

wcschr
rewind
_searchenv
_mbslen
_clearfp

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ