447a19176774bcf437a477e48d0b3c9a_JaffaCakes118 | Triage

Sharing

General

Target

447a19176774bcf437a477e48d0b3c9a_JaffaCakes118
Size

76KB
MD5

447a19176774bcf437a477e48d0b3c9a
SHA1

a2d155b8458e39ac5d4cd3d55afcbebdd8e18142
SHA256

93374d4bb53c94b00f74d14c6df9381a0227c63d748590472bb4604f6fec07fd
SHA512

edb984322e08dbc2ee73e9f7cc7f807781e3cf37061c72ae0fefef4297d8058f53a7c663e325b8fcb7f38bc1668f5de024a84ebb8783d3db03ad3d7fa73a4a00
SSDEEP

1536:NfIp4flgHrlr4fCDF3hlM6G5hzre2H7rEBvy95aKtVbEdAG:Nek2RrXphlM6uXeoMBvq5aoMAG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
447a19176774bcf437a477e48d0b3c9a_JaffaCakes118

Files

447a19176774bcf437a477e48d0b3c9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3447fed2c8ca029ad56c5f12b9aa0c03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree
GlobalSize
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
SizeofResource
LoadResource
LockResource
GetVersionExA

msvcrt

_controlfp
_initterm
__p__fmode
__set_app_type
difftime
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
__p__commode
?terminate@@YAXXZ

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ