f83c8fda3ca22cad5cb8a6e029a388a3_JaffaCakes118 | Triage

Sharing

General

Target

f83c8fda3ca22cad5cb8a6e029a388a3_JaffaCakes118
Size

304KB
MD5

f83c8fda3ca22cad5cb8a6e029a388a3
SHA1

46070fb359f60fd637ccdd3c752391c3dc3e17b0
SHA256

6cf8a44d15e527e616199595505643d6263e0e7e543f591e97aba9ab231174a6
SHA512

d456666d433fa0f5ee0b4fa6e9551cb05744762f08dfdc5707296762ee04f27a19cd8de308d885f9397bb152d6320acfb52a1575aa428d8183f74ba9108c3d64
SSDEEP

6144:bB/dV0t9uO2HrBQSb2QIsO/CFVjdWphBv969sr/NNm:bB/9brBQa2lBqFVjQUsrl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f83c8fda3ca22cad5cb8a6e029a388a3_JaffaCakes118

Files

f83c8fda3ca22cad5cb8a6e029a388a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

817edf7d22693c08930141ab7a4d9bb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
MapViewOfFile
FindAtomA
LoadLibraryW
CloseHandle
GetPrivateProfileIntA
ExitProcess
GetModuleHandleW
TlsGetValue
GetStdHandle
GetFileAttributesA
GetSystemTime
lstrlenW
VirtualAlloc
GetComputerNameA
CreateFileMappingW
GetTickCount
GetLastError
GlobalFree
FindClose

user32

CallWindowProcA
GetClassInfoA
CloseWindow
GetMenu
GetCaretPos
CreateWindowExA
EndDialog
DestroyCaret
GetClientRect
DrawStateA
FillRect
DispatchMessageA
GetDlgItem

ntshrui

GetLocalPathFromNetResourceA
IsFolderPrivateForUser
GetNetResourceFromLocalPathA
IsPathSharedW
IsPathSharedA

expsrv

ProcCallEngine

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ