f179cb7de0c545b3f7ffd129f7395d3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f179cb7de0c545b3f7ffd129f7395d3d_JaffaCakes118
Size

177KB
MD5

f179cb7de0c545b3f7ffd129f7395d3d
SHA1

02b97aab7944df31cf6fd1e4e337cb6a87291540
SHA256

3f7f5cb61fad97693986d50e68e5f5a52bb405cab1bd41b80044ac678fb2d7a5
SHA512

f397b12eaf4cc932c24c785e65e53ac85243ad3eace86c0ca62202e1c89ba660a0f0c1232c4d9afc24df3e19122389a6e61c4b2555dcd90ccaf34db0e6eb5938
SSDEEP

3072:QU+ZW1sO5cmXKvWhVW+N1T7M8SmFyuBhLy8FHiJ9VowSs:Qn5ecehVWeNSpuB9y6CJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f179cb7de0c545b3f7ffd129f7395d3d_JaffaCakes118

Files

f179cb7de0c545b3f7ffd129f7395d3d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4d05ca416fd50848446913082d162d20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
VirtualAlloc
SetFileApisToANSI
FatalAppExitW
SetLocaleInfoA
GetExitCodeProcess
MapViewOfFile
LZInit
GetProcessIoCounters
GlobalReAlloc
GetVersionExA
VirtualUnlock
lstrlenA
GetConsoleKeyboardLayoutNameA
GlobalSize
ExitVDM
SetConsoleScreenBufferSize
GetTapeParameters
GetLogicalDriveStringsA
GetLastError
Sleep
IsValidCodePage

user32

DestroyWindow

shlwapi

PathAddBackslashW

advapi32

DeleteAce

Sections

.text
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ