38d2d8ac531be29af03ed5cf363ffb8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38d2d8ac531be29af03ed5cf363ffb8c_JaffaCakes118
Size

69KB
MD5

38d2d8ac531be29af03ed5cf363ffb8c
SHA1

0b3916912f5103b2cfc1c46ee3f367d80d826118
SHA256

ae5ab8f26dc5b65c0567d17ccd3688f2e9615c3d5852caefa5057dde5116be6f
SHA512

d0b8f39fca39d30dcc24d629f57326b3baa3ecaefee68882f023abc836940c1bfc06c8985e4c72129a504e57713c6935179869d687e0f347e2067034db22c64a
SSDEEP

1536:7/os2y3sU7QOnMFmG4RyPrqH/CQbaJxpMmwNNYOLdbMRIiu:7/ohZYzrG1P+zbuD8KOLdx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d2d8ac531be29af03ed5cf363ffb8c_JaffaCakes118

Files

38d2d8ac531be29af03ed5cf363ffb8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b3d2a05aaa024c0880099a6d8ea6441

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcessId
InterlockedExchange
OpenProcess
GetLastError
GetModuleFileNameW
GetProcessId
CreateThread
Sleep
WaitForMultipleObjects

msvcrt

_initterm
_controlfp
_j0
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

PathAppendW
UrlCombineW
PathCombineW
UrlGetPartW
UrlApplySchemeW
UrlCanonicalizeW

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ