38d9440828dbc7f6dda89b6402e9dc44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38d9440828dbc7f6dda89b6402e9dc44_JaffaCakes118
Size

14KB
MD5

38d9440828dbc7f6dda89b6402e9dc44
SHA1

502b066dc4a4c9819dacfc4cab092e6577d57c0e
SHA256

2fdff430c7a18bd7157a2d37f4db94d5baefc502a6ec537220baf33837c20651
SHA512

3677df5ea4b74b5f66c8598ab1bffd61605bbe86860b76269f4c8e6283ee7ace6a5e3783bc4103b253eb086c14832483da72a17202f128ccccc724ca5072da71
SSDEEP

192:pPJt64K6VsMkW+PGuDR+IyJ6ghuJZ+ZC:pRt6/rMkW+PPsJvhuJZ+Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d9440828dbc7f6dda89b6402e9dc44_JaffaCakes118

Files

38d9440828dbc7f6dda89b6402e9dc44_JaffaCakes118
.exe windows:5 windows x86 arch:x86

68d116da5ac9d2d0c051d58133474251

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

userenv

GetProfilesDirectoryW

imagehlp

MapFileAndCheckSumW

kernel32

HeapReAlloc
GetCommandLineW
ExitProcess
GetVersionExW
GetLastError
GetModuleFileNameW
GetModuleHandleW
FormatMessageW
DeleteFileW
HeapFree
RemoveDirectoryW
SetFileAttributesW
FindClose
GetProcessHeap
lstrlenW
FindNextFileW
FindFirstFileExW
HeapAlloc

user32

wsprintfW
GetActiveWindow
MessageBoxW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ