6341f5e3073b8b9e39ff7417181abdb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6341f5e3073b8b9e39ff7417181abdb6_JaffaCakes118
Size

186KB
MD5

6341f5e3073b8b9e39ff7417181abdb6
SHA1

ea36f21d3e3319ca52314cc8704739a8646a3c0d
SHA256

475ba305f29c79efbf0152350faa59a6130e04ff9c2043982120745ec8c9ad83
SHA512

fa68e2bd625ea1fe19d8a87dc65ce0b5f7b7865d700906860eb2d474f72530210a2e37492759059726e5bd95af64683ac6983c36d6085269f7ae3f0283908c34
SSDEEP

3072:EHw6Tg/S9mBVDW3ur2Bcw3u4I+Vp9MnIfRkGs/GkCJ+/zSnhFx8+KYYaU5fAuBSM:Uw6TCS9o0u6BcqW2pyIfRNEOc/zSnhXc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6341f5e3073b8b9e39ff7417181abdb6_JaffaCakes118

Files

6341f5e3073b8b9e39ff7417181abdb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84eca3193080501ac462d6cdc634820a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
RtlUnwind
GetLocaleInfoA
GlobalGetAtomNameW
GetACP
HeapSize
GetConsoleOutputCP
GetOEMCP
SetFilePointer
GetCPInfo
GetTimeFormatA
WriteConsoleA
EnumResourceTypesW
MultiByteToWideChar
GetDateFormatA
HeapReAlloc
SetUserGeoID
IsValidCodePage
SetStdHandle
TlsAlloc
VirtualAlloc
TlsSetValue
RaiseException

rpcrt4

RpcStringFreeA

shell32

SHGetUnreadMailCountW
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
SHGetFileInfoA
DragAcceptFiles
Shell_NotifyIconA

user32

DispatchMessageA
MessageBoxA
LoadStringA
CharNextA
GetDesktopWindow
DispatchMessageW
PeekMessageA
wsprintfA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ