18213e34290874b7f9303010adaa766b_JaffaCakes118 | Triage

Sharing

General

Target

18213e34290874b7f9303010adaa766b_JaffaCakes118
Size

116KB
MD5

18213e34290874b7f9303010adaa766b
SHA1

9b5f59544784c6acd8d89739b0f446cc12fc7b82
SHA256

226256e4d2c1a4e56ba844e0a4a9d8b83c26bf71eb66d5ecdc76d2c5c1d47fb8
SHA512

763645e5a6cb9e1111e451d3f53eeb16dfd7ac79daf4f355c2b3ba33f0ef3cb1513a1183ea3f28d6ee3e6ce3dd3c9e7277139f6f4edf6da1b9799250e833f2f3
SSDEEP

3072:z7Ql/oMIZ2CQzqSM8cT91m3jGmTavePNy2/O8Til:YlAMI2JM/9UvTL02/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18213e34290874b7f9303010adaa766b_JaffaCakes118

Files

18213e34290874b7f9303010adaa766b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c37e0631f5cd528c1284e0dd00c62a98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileExW
CompareStringW
GlobalHandle
GetTempPathA
FindVolumeClose
SetConsoleCursor
GetWindowsDirectoryA
GetCPInfoExA
GetPrivateProfileIntW
TermsrvAppInstallMode
GetCompressedFileSizeA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE