4d4ec1517e67a05398ff5d0428eac813_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d4ec1517e67a05398ff5d0428eac813_JaffaCakes118
Size

39KB
MD5

4d4ec1517e67a05398ff5d0428eac813
SHA1

2ca836b6afb2b76c1ea91df56dcd8c26b7f064b7
SHA256

352566c96718440177b1ee8d6ec22b2d1b95ebfa078461a21200f48fa3733f11
SHA512

bc3cf62e71f4fef695ead3301dd20b4e224cc5a0eb3a8d9b5d100048ae68480092599e9dc7474aa13331bd31d2bc7dfbc248837274b71cdba0f0f6b6b665cc22
SSDEEP

768:NOjkJMUw2zctbQR8AzmfstIO6xeT9T0VlzEI73:rJMgzoK8AKfst3GeT1ulQIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d4ec1517e67a05398ff5d0428eac813_JaffaCakes118

Files

4d4ec1517e67a05398ff5d0428eac813_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8d51733264ccfc6f244a7a4e3524b34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FindClose
GetDriveTypeA
GetEnvironmentStringsW
GetFileType
HeapAlloc
HeapCreate
SetHandleCount
WaitForSingleObject

msvcrt

setlocale
_wcsicmp
exit
time
_exit
realloc

user32

ExitWindowsEx
wsprintfA
TrackPopupMenu

oleaut32

SafeArrayDestroy
SafeArrayAccessData
RegisterTypeLi
OleTranslateColor
SysReAllocString
OleLoadPicturePath
GetErrorInfo
SysStringLen

shlwapi

PathAppendA
PathCombineA
PathFindOnPathA
SHQueryInfoKeyA
StrChrA
StrStrA
StrStrIA
SHOpenRegStreamA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ