1b3c9a390792d24614b6a8f5829590df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b3c9a390792d24614b6a8f5829590df_JaffaCakes118
Size

106KB
MD5

1b3c9a390792d24614b6a8f5829590df
SHA1

831618ed99891564e0584dd64cc7e1c57832790f
SHA256

91d305d65593768ea38e601f51207ded324879eee504f82464cec230e27cfe5e
SHA512

cb26734ebb967153211da17b43f22f0bbc922a2a68950cbe9821f56566351cec49357b2cce58d359944c882b8d802cf24d11e2a64501d2b9a80e6313a21c8157
SSDEEP

3072:TUFOQB++OswfJku2eu3XLsagXDDW3uHfjHXife+7vqC:TCOQBPOs+2e8wvX/j3z+7vqC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b3c9a390792d24614b6a8f5829590df_JaffaCakes118

Files

1b3c9a390792d24614b6a8f5829590df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE