a302c3ddeda22eaeda754cd6743dc68a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a302c3ddeda22eaeda754cd6743dc68a_JaffaCakes118
Size

187KB
MD5

a302c3ddeda22eaeda754cd6743dc68a
SHA1

7dbed5cf66eb5182e4fd057696ef6c003aecc1cb
SHA256

da54c4890052e330990a49e1dbf08ac0d2c9621d3a28c295b6b9a4102ef16b84
SHA512

0379ea0e342e9a2adfb849da2ecfc87325f3a5659a78671b2ef21add0adf87fe29486efbba346d05c67900b26bd5b9167b88aff12cd51ba059ec5af6829d385a
SSDEEP

3072:V/bicqsU5VBRv8bOZn+JNRqiQKRl2cJfrCh8pK7xfxHLXt9xpELX0z/mzws:V/biczqKS+GIJJfrFK7xfRL9y0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a302c3ddeda22eaeda754cd6743dc68a_JaffaCakes118

Files

a302c3ddeda22eaeda754cd6743dc68a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ef2b3eba3d65434e7b666062c11820b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
SetStdHandle
MultiByteToWideChar
GlobalGetAtomNameW
SetFilePointer
GetDateFormatA
GetCPInfo
GetACP
TlsSetValue
HeapReAlloc
VirtualAlloc
EnumResourceNamesA
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoA
GetModuleHandleA
GetTimeFormatA
TlsAlloc
RtlUnwind
TlsGetValue
GetOEMCP
RaiseException

shell32

SHCreateStdEnumFmtEtc
DragAcceptFiles
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
SHGetMalloc
SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHAppBarMessage
Shell_NotifyIconW

occache

FindControlClose

Sections

.text
Size: 92KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ