29acef89c14e49dd2de0583b9bc51420_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29acef89c14e49dd2de0583b9bc51420_JaffaCakes118
Size

70KB
MD5

29acef89c14e49dd2de0583b9bc51420
SHA1

cd953d9ed6f34206c8a00be8c94b8e1bb4cf206f
SHA256

9164a35fdc238e4131e87e8c0580cf9d957862abcaac6f41cc79fe98121eda9a
SHA512

fd50a1a77d8fbb377a382fd9be8fbb2a46ecfafe8d3fb61dec14daf720bb9ae041ca8d4e67e704a0aa10207fdf37390e8cbdde1141f935a00331568058205490
SSDEEP

1536:3IOIU3Uolu1CbwlhcIeoOB2DAQieCJMlVJcuEVe:3QF51CbdvaDEevlVJOVe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29acef89c14e49dd2de0583b9bc51420_JaffaCakes118

Files

29acef89c14e49dd2de0583b9bc51420_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2729860c9c5f92ab0fd5bc37bc675142

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcessId
ProcessIdToSessionId
GetSystemDirectoryW
GetCommandLineW
LCMapStringW
LoadLibraryExW
VirtualUnlock
VirtualLock
GetSystemInfo
ReleaseMutex
CreateMutexW
ResetEvent
SetEvent
CreateEventW

msvcrt

_initterm
_controlfp
_j0
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

PathAppendW
UrlCombineW
PathCombineW
UrlGetPartW
UrlApplySchemeW
UrlCanonicalizeW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ