89bf4a09a69cf9203d802c517ba69107_JaffaCakes118 | Triage

Sharing

General

Target

89bf4a09a69cf9203d802c517ba69107_JaffaCakes118
Size

22KB
MD5

89bf4a09a69cf9203d802c517ba69107
SHA1

1eeec6a99a7e738e2744811db7e1633745aa03cb
SHA256

948d5f3be2bd6d29144e7ae0296e7c96662ca5cdd0ef68e33d8a9472f85c47f6
SHA512

a817a4056fa64e9738e04562b53867e275aee03641a7892dd060a74fb8df3455bfb735d6544f31e5af812a270aba1ab7aebe32a4052c2533351cc42cd40979c7
SSDEEP

384:NU9Pxqu2Zi5oj+9bCYBY8r+zLvzVlaHfVfZEmLIwq0ml+planXM4VPRFU7:cZ+GCwVYRzPVlatfZjYA8XM4VZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89bf4a09a69cf9203d802c517ba69107_JaffaCakes118

Files

89bf4a09a69cf9203d802c517ba69107_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE