05eafbbbb2cb324d7260f156046c3e18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05eafbbbb2cb324d7260f156046c3e18_JaffaCakes118
Size

363KB
MD5

05eafbbbb2cb324d7260f156046c3e18
SHA1

f006ef93f23575128f5a7845f4e9423fc20edbc6
SHA256

b8047702315dd10097978df88841cd0c431a79ce849dc98281a78d1fe3c36f1b
SHA512

78f0a2a829e24cc06c475467d0adaa756d704a0e160649083f17cfa4f8955ceda18c10c86dd3e1f0df6de628113d66b9202780b5f7dd27f29a6bd717b2c47d16
SSDEEP

6144:wiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:n+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05eafbbbb2cb324d7260f156046c3e18_JaffaCakes118

Files

05eafbbbb2cb324d7260f156046c3e18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

470504424fd8a73dae89abceac357094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
GetDiskFreeSpaceExW
Sleep
GetDriveTypeA
SetLastError
DeleteCriticalSection
GetModuleHandleA
GetExitCodeProcess
LoadLibraryExW
VirtualProtect
GetLastError
TlsGetValue
GetTickCount
ReleaseMutex
GetCommandLineA
FindClose
CreateMutexA
EnumResourceTypesA
CloseHandle
GetComputerNameA

shell32

StrChrA
ShellAboutA
SHFree
DllUnregisterServer
DragFinish
SHGetDiskFreeSpaceA
DragQueryFileA
SHGetSettings
ShellMessageBoxA
SHGetMalloc
DuplicateIcon
DragAcceptFiles
ExtractIconA

printui

vPrinterPropPages
vQueueCreate
bFolderGetPrinter
bPrinterSetup
PnPInterface

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ