f12a057b209848761f031446aa0f4dc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f12a057b209848761f031446aa0f4dc6_JaffaCakes118
Size

34KB
MD5

f12a057b209848761f031446aa0f4dc6
SHA1

eb605f945905dc9d835d1d8ce2fc77d12b77d2f7
SHA256

c1704b92eebb53b0a981e94074525b56afd99ee3194db18ba4750618e8c92e07
SHA512

5e73e74bfdb784efe4d05093d36a8f0b274c90b6d4602d53f0842bbe55bf6b3e0712c0295dc581bf68862b7998c9dc33f1b7bb82b864369a1601855feda68d15
SSDEEP

768:UwFv1UmJQeH6Q8Aim/vKLzYsuVJQdOrEF4lMAYHxeLh3:UwF1UmBHw+/yLzYNzrCllRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f12a057b209848761f031446aa0f4dc6_JaffaCakes118

Files

f12a057b209848761f031446aa0f4dc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE