12d08cb1bfbf201d748e11140b33b9b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12d08cb1bfbf201d748e11140b33b9b1_JaffaCakes118
Size

104KB
MD5

12d08cb1bfbf201d748e11140b33b9b1
SHA1

b3bec4d05d70c96c69d93d3527362b40af4f27a8
SHA256

6f1ac68fcb41176fa8ea18b0134e84a5bfb57438fadd959743c34af084119d1a
SHA512

b8d85e02bb068d4cdb701ddcafdf1980209b0fe381ac30838d60f6fd0bc7e1ee749e910452f049a7ea30c4de4342ba3d5cea877cae9304615fe98bafc50ca1de
SSDEEP

3072:26VRcbxDJ5KSCXd+XkE2T8hl5MAJ/Zt5l8Iy8zAEZp+:2CGRWSo+n2S5MAJFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d08cb1bfbf201d748e11140b33b9b1_JaffaCakes118

Files

12d08cb1bfbf201d748e11140b33b9b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

424a1561a9b1963b27c8d827e3411917

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutGetID

advapi32

SetKernelObjectSecurity

kernel32

CloseHandle
EnumResourceNamesA
ReadDirectoryChangesW
GetCommandLineA
GlobalMemoryStatusEx
GetDynamicTimeZoneInformation
LockFileEx
Heap32First
SetFilePointer
GetStdHandle
GetUserDefaultLangID

rpcrt4

RpcBindingReset

user32

FillRect
IsRectEmpty
GetMenuCheckMarkDimensions
SetKeyboardState
GetMessageExtraInfo

shlwapi

GetMenuPosFromID

winscard

SCardConnectW

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ