f341dd34d9b10b193337b9c2e54ab34c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f341dd34d9b10b193337b9c2e54ab34c_JaffaCakes118
Size

51KB
MD5

f341dd34d9b10b193337b9c2e54ab34c
SHA1

14f998354cf12957eadc9fe2e94c536c0a40c7cb
SHA256

6005352d3bfaf933d4b3c0ac9fa8ccad74c558b49a54f356965f96a07fb2bf80
SHA512

7520df920be070bb550ef162066d23d0a8e61bf6dcdd01a9ec8a791505a0a063f46d4628ef6eeeecbcccfd55238db5fcab3482a10b09157ebf727f13abf53db6
SSDEEP

1536:/HmZ6WhLeLpewsWH7M1bEYBACQvCTldm0kaJKNWG:/6H2bsWbV1CQvsrm0kai3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f341dd34d9b10b193337b9c2e54ab34c_JaffaCakes118

Files

f341dd34d9b10b193337b9c2e54ab34c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

abf90a5fd14edbd12b5dcee4761ceb17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
IsDBCSLeadByteEx
OpenProcess
CreateEventA
CheckNameLegalDOS8Dot3A
SetConsoleWindowInfo
GlobalFree
CancelWaitableTimer
GetEnvironmentStringsW

advapi32

SystemFunction025
LsaLookupNames
OpenServiceA
ChangeServiceConfig2A
I_ScGetCurrentGroupStateW

ws2_32

WSASetEvent
WSAAddressToStringA
getprotobyname
getsockopt
WSAInstallServiceClassW
WSAAddressToStringA
WSASocketA
WSAIoctl
getnameinfo
WSAHtonl

shell32

ExtractIconExW
SHAlloc
OpenRegStream
SHBrowseForFolderW
ExtractIconResInfoW
StrRChrA
SHCreateDirectoryExW

gdi32

GetWinMetaFileBits
ColorCorrectPalette
FONTOBJ_pQueryGlyphAttrs
GetMetaFileBitsEx
CreateEllipticRgnIndirect
SetPixel
DdEntry44
XLATEOBJ_hGetColorTransform
GetCharWidth32W

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE