ac9f2259ac4b8c19db9123e822f3a107_JaffaCakes118 | Triage

Sharing

General

Target

ac9f2259ac4b8c19db9123e822f3a107_JaffaCakes118
Size

1.1MB
MD5

ac9f2259ac4b8c19db9123e822f3a107
SHA1

88267d8ac120780655976607f02b960bedf3a9b5
SHA256

c3cb9eea09d75baf41a2f144cc13f68a1c0b1629dccdf9f60a4dfdc5f57161ff
SHA512

35002ce9923ad9cd656c48b0b8b1e12bd2fcdc8081328c287277909201ed53a8332c07a7fbb181eae9a73516a2246936788459dfd632db6ebf2017466261c216
SSDEEP

24576:uY7426SR4y0K2+ObYkmOBkSCk0Oshvqb4UVlavIK:uwZKbVSSCJFrgla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac9f2259ac4b8c19db9123e822f3a107_JaffaCakes118

Files

ac9f2259ac4b8c19db9123e822f3a107_JaffaCakes118
.exe windows:1 windows x86 arch:x86

870dd3c0b0eb4c3586b0211dabcac6c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcessIoCounters
FindFirstVolumeMountPointA
UpdateResourceA
HeapReAlloc
GetConsoleCursorInfo
HeapCreate
GetWindowsDirectoryA
VirtualAlloc
IsDBCSLeadByteEx
FileTimeToDosDateTime
GetThreadPriority
GetThreadContext
GetDiskFreeSpaceA
CreateSemaphoreA
SetHandleInformation
WritePrivateProfileSectionA
GetFullPathNameA
GetLocalTime
WriteFileEx
GlobalHandle
GetTempPathA
GetThreadLocale

oleaut32

SysFreeString

winspool.drv

EnumPortsW

msvcrt

_except_handler3

ole32

StringFromGUID2

Sections

.text
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ