b09c3c502efaf2a1599dc48d21e62cc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b09c3c502efaf2a1599dc48d21e62cc0_JaffaCakes118
Size

171KB
MD5

b09c3c502efaf2a1599dc48d21e62cc0
SHA1

828ffac36360d2a96567fc66d311c6f949b5164f
SHA256

2024eee47b374318b56d2eb4777a35a585133df382aeb60a6f3dbc6a0dae0ec8
SHA512

6e4fd3b23e7d14f948c494806aa73916b6e40d665228387435fe548d300ae3db10d9f7027e99a914984f67621f609a761c4ec8d885a025553f082f85623f76cf
SSDEEP

3072:0/F0r/nsw6A+J26uo14TfgtKG5IsJ/e9Q8zlhDyK8dRRWkNhOX00lm4edjV:yy3v/aagMMIsJkQ8znyK8d+kqxm9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b09c3c502efaf2a1599dc48d21e62cc0_JaffaCakes118

Files

b09c3c502efaf2a1599dc48d21e62cc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c52afc25c7f5cf9b5e687d84cf9af80c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryExW
GetConsoleCP
AddAtomW
HeapAlloc
WriteConsoleW
HeapFree
TlsSetValue
MapViewOfFile
UnmapViewOfFile
SetLastError
TlsFree
TlsGetValue
GetModuleHandleW
EnumResourceNamesA
TlsAlloc
CreateFileMappingA
CreateFileA
GetLastError
GetConsoleMode
GetModuleHandleA
CreateFileW
ExitProcess
FlushFileBuffers
VerLanguageNameA
GetProcessHeap
GetVersionExA
GetVersionExW
InterlockedDecrement
GetTempPathW
GetEnvironmentVariableW
InterlockedIncrement
Sleep

winmm

mciSendCommandW
sndPlaySoundW

setupapi

CM_Get_Depth_Ex
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shlwapi

PathAddBackslashW

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ