1ab83f5555757b22b6d8808ad534cbdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab83f5555757b22b6d8808ad534cbdd_JaffaCakes118
Size

312KB
MD5

1ab83f5555757b22b6d8808ad534cbdd
SHA1

9ccaaa3a8f11e4748da48bc46650549c81a84a94
SHA256

1e12e3e4b0a879bab594575f01caabda7443b81bcba5604b888577a4a8af666a
SHA512

96d6fedcc95adc7b4ab7256721a9b5c3e4c13b1c5bf6cefd17b523302816acbdf1ba3bd7e2724cc5f4056a9be36e2026c983a8af8c0554ed5e0491c0822194b3
SSDEEP

6144:Ey37DtR95SDb+xXY0fKk9z7n43i5F99aBRjKv/ylqSQcF:NLZUDb+xpfN9PZ98BRjKUocF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab83f5555757b22b6d8808ad534cbdd_JaffaCakes118

Files

1ab83f5555757b22b6d8808ad534cbdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4f3c4e114f28801d46dac6f9af630bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
TlsSetValue
GetSystemDirectoryA
GetModuleHandleA
TerminateThread
VirtualAlloc
HeapCreate

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

psapi

GetModuleBaseNameA
GetProcessMemoryInfo

avifil32

AVIPutFileOnClipboard
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ