81f769971e80949a1bab0927bc19d714_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81f769971e80949a1bab0927bc19d714_JaffaCakes118
Size

96KB
MD5

81f769971e80949a1bab0927bc19d714
SHA1

06a740ff473f22e6e9beef21bd5f7ab1eee409b4
SHA256

a0f5d3b5cdc02e9be46284b09eb770fe95ce9a035b025979e1e3388f0f0451ac
SHA512

362e72357385258281b44a24e5e0ac82cfab535aa3ebcab64765f02e8634d94787611551ae6e6e9d5ad3cc907d9693c5f7ef27ecea315c9bc769ad8a590a2ecb
SSDEEP

1536:8adVnKMJY1BehqxtkY8h/OF+FQjvd4nXdeIHYAE5pI3ucmLGlBwINrnSJm/OkeaY:RrnKEIkYQe+FQjV8XNDEXI8OaeuOOGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81f769971e80949a1bab0927bc19d714_JaffaCakes118

Files

81f769971e80949a1bab0927bc19d714_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ