885795e02eccb588037950e8198148ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

885795e02eccb588037950e8198148ff_JaffaCakes118
Size

33KB
MD5

885795e02eccb588037950e8198148ff
SHA1

0f1dca7d48a345ba7be00846a969a48fa78a7c9b
SHA256

9c60ac532eb982e0688cc281127db72e68382186451c6241468dfa4e37c0c0f0
SHA512

80b5a1055e746de3f912e62d8767ce6f3152587f6918de90c1729af19554a9fd999909b5b8f7b83201a9be2b8c8b72afe3da1f9b97cb76ef5a0d27b3509629b8
SSDEEP

768:fNSsGkeQTeQukJIaCpgcvIRgH4Cc+3vognUTZmeB0n:lPGnQT9XJIaCmsvhvx960n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
885795e02eccb588037950e8198148ff_JaffaCakes118

Files

885795e02eccb588037950e8198148ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE