feac7781b569677ffb22fb18d0c3556e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feac7781b569677ffb22fb18d0c3556e_JaffaCakes118
Size

106KB
MD5

feac7781b569677ffb22fb18d0c3556e
SHA1

b13cbdd9f991ca4eef1ab68895c78371b7332f7b
SHA256

b859ca8882f34f0a9a06dd111ee15c0e237a76ae7f395671f2f03e2ea5ce41d6
SHA512

46bc9f7d70dad714d80403c04b1a320e1a8d22733f718d4d5a55d15c3ad116d8a23fa00bd546639146d3bfdfd9a8acac39fcace5d569372b003db00707638ab4
SSDEEP

1536:1nys3OA4CIJLhPH8NBkKMMinFO2PAx2t/j6bxy8qB9HEeihggA1KbaPhdQkVAoB1:Est4CI7HcBky+9fJ2ugAetkVA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feac7781b569677ffb22fb18d0c3556e_JaffaCakes118

Files

feac7781b569677ffb22fb18d0c3556e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE