192d4e939973c2a5cf93053f4b0a7727_JaffaCakes118 | Triage

Sharing

General

Target

192d4e939973c2a5cf93053f4b0a7727_JaffaCakes118
Size

312KB
MD5

192d4e939973c2a5cf93053f4b0a7727
SHA1

b7a50d6faeddb94b70c8c9a7b3f4181d504f7825
SHA256

d2f2f8f93bb225dcfe893d021b429e8e4e69bbf7849998f0ee8cc0e028f46810
SHA512

dc5841a93722e126e0f7957d728069f9c0f258e9f762aab7e795f1555844ff6bdb3affe11e6666d023fa48e16b232e94aaea33d3f6adf61af6cb99d12b088e04
SSDEEP

6144:EUaeLA+un3xQWffw2gHY9TZKokLPG3GZCTYH:C3BLw+rKoU+3Ggk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
192d4e939973c2a5cf93053f4b0a7727_JaffaCakes118

Files

192d4e939973c2a5cf93053f4b0a7727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a40ac01b26174101c315a0e1a536538

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
GetProcAddress
GetFileSize
CreateFileA
VirtualFree
VirtualAlloc

ole32

CoUninitialize

netapi32

NetDfsRemoveStdRoot

avifil32

AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ