38154ed4dc98b90bd9169754b3cdc2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38154ed4dc98b90bd9169754b3cdc2eb_JaffaCakes118
Size

951KB
MD5

38154ed4dc98b90bd9169754b3cdc2eb
SHA1

44dc8af69da81a15a502597d85a9a0fcb67c2972
SHA256

55c037b477fbd7941619835c12ef4045e9ffb7b01af067f64735ad87b6445989
SHA512

d2ee85dc759825d355ba262100c43ff36b8d2faa3b6198f12f4737ffeefe29a593bea54a97e54b81b6e4b7aab68c5859e8b88cf6df4d3e0da845368c767d99ed
SSDEEP

24576:D2yfRww59ninrPz0G3ptzPQQfpWXZq7Fzq1XpJQUJnnv9yp3+7:BfRfXinrL0G3phQ0UQSnnv9ypc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38154ed4dc98b90bd9169754b3cdc2eb_JaffaCakes118

Files

38154ed4dc98b90bd9169754b3cdc2eb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e986e883a0b1f9a79992455a38cf2cbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
TerminateProcess
CreateThread
GetCurrentProcess
GetSystemDefaultLangID
GetVersion
Sleep

shell32

ShellExecuteA

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

advapi32

RegOpenKeyExA

Exports

Exports

ApWiFiInit
Ok

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ApWiFi
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ApWiFi
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ