affa9a3489e9645a1f40ce56c56b9c03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

affa9a3489e9645a1f40ce56c56b9c03_JaffaCakes118
Size

1.1MB
MD5

affa9a3489e9645a1f40ce56c56b9c03
SHA1

42289231dc33e189526a26e561f551c625353b90
SHA256

9071b014becab1b4acd536ecfaaf108281c63879ee252f4a01c02e0820c79c46
SHA512

3e863277db5b9d851e1c6f0ba6ce40edc1195fca4db84850d3ef56eea74818a5071dc7542e0131e7755742bf8b08d799977762751558af4fd79a0960636d3179
SSDEEP

24576:fHTeyNhpWUFn4Rzuzv6+ybSYl6jtqmHkXanGeU:fTNhpWUFn4Rzz+yOYz+m7eU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
affa9a3489e9645a1f40ce56c56b9c03_JaffaCakes118

Files

affa9a3489e9645a1f40ce56c56b9c03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d36c25e61865c78614986e952765ab6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetUserDefaultLCID
GetSystemDefaultLCID
GetModuleHandleW
GetSystemDefaultLangID
GetLastError
GetCurrentProcess
GetModuleHandleA
GetCommandLineW
GetCurrentThread
GetUserDefaultLangID
GetCurrentProcessId
HeapAlloc
GetProcessHeap
GetVersionExA
CreateFileA
TlsSetValue
CloseHandle
WriteFile
GetCurrentDirectoryA
GetOEMCP
GlobalFree
LocalFree
SetStdHandle

user32

GetSubMenu
PostQuitMessage
ReleaseDC
GetClientRect
EnableMenuItem

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ