841c2c83a9fee7b41dc6cb765a6b6ae3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

841c2c83a9fee7b41dc6cb765a6b6ae3_JaffaCakes118
Size

148KB
MD5

841c2c83a9fee7b41dc6cb765a6b6ae3
SHA1

64f031d930242be84d3d7b5ac601f7a582d5a097
SHA256

88082f1464fcfe04afdc0510d7512515a33365a5cd6b9a77e4a64fd8b005ed8e
SHA512

022a48005fda1929d93d791679481e639bad25adf4eebdce766c0ba431a221e61d1cdaab479b9a9d6e321ef9a0660e7d2fd14e4397e42544b5ded02c83186824
SSDEEP

3072:PZC+qYuJkPCGX7fHRP/fOyv+FOZmkECYcola1NRlQe3s+VJFZTnO:PZCddJm3LfRPHvTmkECY/l2Nr5jVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841c2c83a9fee7b41dc6cb765a6b6ae3_JaffaCakes118

Files

841c2c83a9fee7b41dc6cb765a6b6ae3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bcdba651c0e3c30a769f0ef51f5512c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoFileTimeNow
StgOpenStorage
CoUninitialize
CoCreateInstance
CoInitialize

occache

FindControlClose

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

kernel32

SetFilePointer
MapViewOfFile
LockResource
CreateFileA
LockResource
SetEndOfFile
VirtualQueryEx
GetFileAttributesA
FindNextFileA
FindResourceW
FindClose
GetCurrentProcess
FindFirstFileA
EnumResourceNamesW
ExitProcess
SizeofResource
GetSystemInfo
ReadFile
GetTempPathA
CreateFileMappingW
UnmapViewOfFile
GetModuleFileNameA
CloseHandle

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ