955c8f784f14c261da7c1546ee69da79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

955c8f784f14c261da7c1546ee69da79_JaffaCakes118
Size

33KB
MD5

955c8f784f14c261da7c1546ee69da79
SHA1

24b60ce7e2f24299b77f7d91f6d5af19df9e1007
SHA256

304a5f1b276b5c8f484ce12d985ccb09891bc51dbdb0158d665caedcf7a06ac7
SHA512

bc86d27b974a1b929a34e791497ceab3a254a577bb2494c088bd597c44b3c9d35f043a102820ee7d8d1429b6d49b36f66aca8de1f11c7357d44d0b3f496941e6
SSDEEP

768:svBiwHyBFb181lqboeWBVDqswqGhiuwjVnvp5:svUHbYzeWBV+sLz9j5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
955c8f784f14c261da7c1546ee69da79_JaffaCakes118

Files

955c8f784f14c261da7c1546ee69da79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE