3faa4d4a1221e1f1aa83240699f73752_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3faa4d4a1221e1f1aa83240699f73752_JaffaCakes118
Size

50KB
MD5

3faa4d4a1221e1f1aa83240699f73752
SHA1

7840442cfd5c427c658489707afdea0e560d8159
SHA256

ba0805f379d2713b66d10c656ef51e19a3f2b3e0d09a8fe375a84d2abbdc5432
SHA512

bde02fa157f30b3fe692fa7b3c668199c8bfdf37774940cf72d5d50455198d08e4c8979184c3eb203e670ea683528204ce24c85c25458381c538a6865ba335be
SSDEEP

384:o0boibgqbMNeLNek+vDq5giEyV/XldCEDcGwIlT3y6iIEQUOFgj:bD0yB/nT34IEogj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3faa4d4a1221e1f1aa83240699f73752_JaffaCakes118

Files

3faa4d4a1221e1f1aa83240699f73752_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa6177423c56bdb1abfa5008a2c22ff8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
VirtualProtect
TlsGetValue
Sleep
SetLastError
CreateMutexA
GetDiskFreeSpaceExW
GetLastError
FreeConsole
FindClose
GetComputerNameA
GetCommandLineA
ReleaseMutex
CloseHandle
GetModuleHandleA
EnumResourceTypesA
GetExitCodeProcess
GetTickCount
LoadLibraryExW
DeleteCriticalSection

shell32

DragQueryFileA
ShellAboutA
StrChrA
DuplicateIcon
ShellMessageBoxA
SHGetSettings
DragAcceptFiles
DllUnregisterServer
SHGetMalloc
SHFree
SHGetDiskFreeSpaceA
ExtractIconA
DragFinish

printui

vPrinterPropPages
bFolderGetPrinter
vQueueCreate
bPrinterSetup
PnPInterface

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cvpukjh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE