281544b19f8b8aec65479a4c9f5513ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

281544b19f8b8aec65479a4c9f5513ec_JaffaCakes118
Size

363KB
MD5

281544b19f8b8aec65479a4c9f5513ec
SHA1

f2dcdcc9b11a0b088354adaf6e9c7151cb0de26d
SHA256

63eee10368abc0bdd41a1aae8fbcea8c13839f773bed15c6630d6d2aa0dc50ce
SHA512

545130fa3300e170eb1408055f3a3869a004a3a3d447dbca546775477d8325e342375dc1730b2d17d9ba4bfba3c4ef20c417801fcfa05446af575b34564599ec
SSDEEP

6144:niJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:i+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
281544b19f8b8aec65479a4c9f5513ec_JaffaCakes118

Files

281544b19f8b8aec65479a4c9f5513ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7daad91d273a51f762547091ab1e64b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
TlsGetValue
CreateMutexA
GetModuleHandleA
GetDriveTypeA
GetExitCodeProcess
EnumResourceTypesA
Sleep
CloseHandle
SetLastError
GetLastError
GetDiskFreeSpaceExW
GetComputerNameA
DeleteCriticalSection
GetCommandLineA
ReleaseMutex
FreeConsole
VirtualProtect
GetTickCount
LoadLibraryExW

shell32

DuplicateIcon
SHGetDiskFreeSpaceA
ShellMessageBoxA
DragFinish
DragQueryFileA
DragAcceptFiles
DllUnregisterServer
SHGetSettings
SHGetMalloc
StrChrA
SHFree
ShellAboutA
ExtractIconA

printui

vPrinterPropPages
PnPInterface
vQueueCreate
bPrinterSetup
bFolderGetPrinter

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ