39ab13cb47dc25e19b25dafd700e2c77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ab13cb47dc25e19b25dafd700e2c77_JaffaCakes118
Size

283KB
MD5

39ab13cb47dc25e19b25dafd700e2c77
SHA1

c42de9a4b171a5634a209078ffc1c3d122a19ce1
SHA256

d6d00f335e964612fbed96f8f90e5d333bf9a41c2e34f21490ed035463ede476
SHA512

2777c3deb2d383d381b7cff2d1114dd8e76f7ae1b18cddb47f4e606aff2700d790f9f8ad256ec613f14b9f21fe5dac6d998b73fa1428b611c4d1b6a49b386593
SSDEEP

6144:w7vXDAS0wfOxqpBW8gto5ZsdZjJMQcYWqz9t/Qs/FvN5c1:ivES9OxqpBDgOAZV11n9trvN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ab13cb47dc25e19b25dafd700e2c77_JaffaCakes118

Files

39ab13cb47dc25e19b25dafd700e2c77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

149c53b5b11e45f59f5e3986bfdf001b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
GetConsoleOutputCP
TlsSetValue
TlsAlloc
RtlUnwind
GetACP
VirtualAlloc
WriteConsoleA
HeapSize
GetCPInfo
SetStdHandle
GetLocaleInfoA
EnumResourceNamesA
GetTimeFormatA
TlsGetValue
SetFilePointer
GetModuleHandleW
GetOEMCP
HeapReAlloc
GetDateFormatA
MultiByteToWideChar
IsValidCodePage
RaiseException

occache

FindControlClose

shell32

SHGetFolderLocation
SHGetMalloc
ShellExecuteExW
SHBrowseForFolderW
DragAcceptFiles
SHGetFileInfoW
ShellExecuteW
SHGetDesktopFolder
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListW
Shell_NotifyIconW

Sections

.text
Size: 130KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ