395257b93e9f7907c873bd26add3a310_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395257b93e9f7907c873bd26add3a310_JaffaCakes118
Size

295KB
MD5

395257b93e9f7907c873bd26add3a310
SHA1

75ad8712d2dee5456b1e4d4894cd8be7352d54df
SHA256

15982124d9221b8af67d26791bad532342fd77235f84a2a599c6cb976618e9ab
SHA512

868b78bbeed6f417cda4756681f513d25fafac458eebbb669dcbaa3d73d041e52f4f7e949e223d1e13361f80ed9626afb5e48506773af6392cb28064fa7c367d
SSDEEP

6144:QsurMjR1ou19K5FdSQxdVmpMY9TemO8hY6T1nqNNrX9JzMUr:QsauOFm11Vu6TBQNv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395257b93e9f7907c873bd26add3a310_JaffaCakes118

Files

395257b93e9f7907c873bd26add3a310_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98e516fc4e0e08245ae60bc0e0986b17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
GlobalGetAtomNameW
GetDateFormatA
TlsSetValue
HeapSize
HeapReAlloc
SetFilePointer
VirtualAlloc
GetTimeFormatA
GetCPInfo
MultiByteToWideChar
GetLocaleInfoA
EnumResourceNamesA
GetACP
TlsGetValue
IsValidCodePage
RtlUnwind
GetCPInfoExW
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
GetOEMCP
RaiseException

shlwapi

SHCreateStreamOnFileA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW

occache

FindControlClose

Sections

.text
Size: 139KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ