4cce7ec2d98c40be21e1c3b3d0d0c141_JaffaCakes118 | Triage

Sharing

General

Target

4cce7ec2d98c40be21e1c3b3d0d0c141_JaffaCakes118
Size

48KB
MD5

4cce7ec2d98c40be21e1c3b3d0d0c141
SHA1

8b246ce82b5628cc470146fd0591bb2ad538b058
SHA256

18adbe35ea5b03ede6ecc1a059eddf1b794f46d68c827414aaeb554ba75285ef
SHA512

8ab56c2f13c55fc875f48c2e9f639662de90e8287dfaf58413b82260026935d9d96cd7e98f76578a07561aace7c0622558aa27e36cbd31c0d61d8dc1f1367642
SSDEEP

768:EFJZXOsSSOrf2C85TiSf4ioTlXXX77XXXN98:ERes/HCKTi1ielR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cce7ec2d98c40be21e1c3b3d0d0c141_JaffaCakes118

Files

4cce7ec2d98c40be21e1c3b3d0d0c141_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bc95c9057e5b0690fc3060fd931a510

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
CompareStringA
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError

shell32

SHGetSpecialFolderPathW

ole32

OleInitialize
OleUninitialize

shlwapi

PathRemoveBackslashW

msvcrt

wcslen
exit
_wcmdln
_exit
_controlfp
_except_handler3
wcsrchr
wcscpy
??3@YAXPAX@Z
??2@YAPAXI@Z
__set_app_type
_XcptFilter
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ