18b9e7f735a129169edd1257a571ec5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b9e7f735a129169edd1257a571ec5d_JaffaCakes118
Size

309KB
MD5

18b9e7f735a129169edd1257a571ec5d
SHA1

4a9f49cc4bd5879ef0eb82776b6fa4a2e3db61b6
SHA256

de3c64ce3bd547358efa6056436812ed70fdabf1eb070da49a5a2ed2eedcc9e2
SHA512

f31fe571241a3ced167741a9d3296366deacf2420aadd15ccf1fd6bbc5bc54481d9a91b5d0283f8e3037659ff162900a872403ccfb4fa8883d4a2a9981e8a665
SSDEEP

6144:9QkYbTBfUBYDD/9atusSI09FREHz1T3fG2rol2MpJVPU:9QPxUBY3uy1RE82i2MbVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b9e7f735a129169edd1257a571ec5d_JaffaCakes118

Files

18b9e7f735a129169edd1257a571ec5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8262a39b9a762906868179e36c436d89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
VirtualProtect
CreateMutexA
FreeConsole
LoadLibraryExA
GetTickCount
GetExitCodeProcess
CloseHandle
GetDiskFreeSpaceExW
GetModuleHandleA
FindClose
GetCommandLineA
GetDriveTypeA
GetComputerNameA
EnumResourceTypesA
Sleep
SetLastError
DeleteCriticalSection
TlsGetValue
GetLastError

shell32

ShellMessageBoxA
SHGetMalloc
SHFree
SHGetDiskFreeSpaceA
SheChangeDirA
ShellAboutA
DragFinish
DllUnregisterServer
StrChrA
DragAcceptFiles
SHGetNewLinkInfo
SHGetSettings
DragQueryFileA

msports

PortsClassInstaller
ComDBReleasePort
ComDBClose
ComDBClaimPort
ComDBOpen

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ