2166b032dc886abc81fc3ce8aa5dda05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2166b032dc886abc81fc3ce8aa5dda05_JaffaCakes118
Size

106KB
MD5

2166b032dc886abc81fc3ce8aa5dda05
SHA1

3d7f8c5063b2376cdd2eca0359d0bbd507cf327c
SHA256

d4d027040e4931e0cea0e00f604d314767520de8c33890732df64cf1da271757
SHA512

c41e358458b2e99c78090d713297bc389a42ed42ac9d0a72f6fe2dcd329ad940b822709438b9094c40b8d1dc7abf1c35f1b5a3d936594eaf7461ba5b7ff9ef1f
SSDEEP

3072:BcGrGHW6RVPturTClwstLABpUvqQHVWRFYR:BcGrGdVP83SFtCdQHcRmR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2166b032dc886abc81fc3ce8aa5dda05_JaffaCakes118

Files

2166b032dc886abc81fc3ce8aa5dda05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2196aab126d1ad3168aa39cff18d045a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

user32

DdePostAdvise
CascadeWindows
ClientToScreen

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE