99e2b852c3e1b9158ac41bd1f64b79da_JaffaCakes118 | Triage

Sharing

General

Target

99e2b852c3e1b9158ac41bd1f64b79da_JaffaCakes118
Size

65KB
MD5

99e2b852c3e1b9158ac41bd1f64b79da
SHA1

e43e8a1a728dd495c77fe42214ed7a72fed85edf
SHA256

3249d2d029a099bc1a01ca210beec515eb6bc9c9b4bee016c13f3b815d8efb73
SHA512

77be24bb78936e4600f86ed5b7e1247f23bf65b20265796a329f84fb322b7c267528f8d9cc606bae1747a8f96b9c00e34c1a3af9fecd26e3d2199eb8f6d4c838
SSDEEP

1536:Dh7o6Bji9zYg3klIX5clIw6pPs+inlTiX:Dh7zjieNlmcWLP7Elu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99e2b852c3e1b9158ac41bd1f64b79da_JaffaCakes118

Files

99e2b852c3e1b9158ac41bd1f64b79da_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e80554d5cbb48c746dce8610626a4a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit
CreateFileA
GetModuleHandleW
GetStringTypeW
CopyFileW
WriteConsoleA
GetProcessHeap
SetVolumeLabelA
Sleep
CreatePipe
CreateEventW
VirtualAlloc
GetShortPathNameA
CreateFileMappingW
DeleteFileA
GetACP
CreateSemaphoreW
DeleteFileA
GetCurrentDirectoryW
SetEnvironmentVariableA
DeviceIoControl
DeleteFileA
GetModuleHandleA

mshtml

DllGetClassObject
PrintHTML
ShowModalDialog
DllCanUnloadNow

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ