946e6961bfa1529f72ca7755f191bbb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

946e6961bfa1529f72ca7755f191bbb3_JaffaCakes118
Size

363KB
MD5

946e6961bfa1529f72ca7755f191bbb3
SHA1

fcb6ec16dba9d4438eb3fff9a07199723fbf8330
SHA256

a86f9add09bf1fe0b2225ae8cfe78eab73d870d56dd4d35d4c4a0436876481b3
SHA512

f8ab622a0d336d9cb20ba4dd1b7a18d56ed2cff3ccab643bfce93da75b55563013545ad487531b2865305706620caa0b3cafb910bf25b57012929b8599bd0b25
SSDEEP

6144:IiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:/+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
946e6961bfa1529f72ca7755f191bbb3_JaffaCakes118

Files

946e6961bfa1529f72ca7755f191bbb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c3d06875f0cdb98928ea21e23c2f1a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTickCount
SetLastError
GetLastError
CloseHandle
ReleaseMutex
FindClose
GetExitCodeProcess
TlsGetValue
GetModuleHandleA
FreeConsole
GetDiskFreeSpaceExW
GetDriveTypeA
EnumResourceTypesA
CreateMutexA
DeleteCriticalSection
LoadLibraryExW
GetComputerNameA
GetCommandLineA
VirtualProtect

shell32

ExtractIconA
DllUnregisterServer
ShellMessageBoxA
SHGetDiskFreeSpaceA
SHFree
StrChrA
DragQueryFileA
DuplicateIcon
DragFinish
SHGetSettings
SHGetMalloc
ShellAboutA
DragAcceptFiles

printui

vPrinterPropPages
bPrinterSetup
bFolderGetPrinter
vQueueCreate
PnPInterface

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ