b7475a2153cfe7039d9c340ec3adb38c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7475a2153cfe7039d9c340ec3adb38c_JaffaCakes118
Size

88KB
MD5

b7475a2153cfe7039d9c340ec3adb38c
SHA1

46a27acd0bfc74caa5b89e70847cf7700807a41a
SHA256

51240978b3d9bad52987ab383f96b73e93f2266dfe010659677e8726b4a6f9fe
SHA512

627a7dc038e9d34d55361b27068789c495688a5a6fb816e71740dd2663baf73540d4e656fb7e2c224281f61582ffdd3a231bc6e7eba9aea3623686188b34ff90
SSDEEP

1536:BOUrCCdVuUB24Ngwy6SogaaQg2Wz+ZWf09rhT:ImCCuS24NfyogaaQdWzuWf09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7475a2153cfe7039d9c340ec3adb38c_JaffaCakes118

Files

b7475a2153cfe7039d9c340ec3adb38c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

435c22329e15cde14ef3b505664669d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
VirtualProtect
LocalFree
GetDateFormatA
LoadLibraryExA
FreeConsole
GetLastError
GetDriveTypeW
Sleep
GetDiskFreeSpaceExW
CloseHandle
FindClose
SetLastError
TlsGetValue
GetCommandLineA
EnumResourceTypesA
DeleteCriticalSection
IsBadCodePtr
GetModuleHandleA
PulseEvent

shell32

DragAcceptFiles
DragQueryFileA
DuplicateIcon
ShellAboutA
ShellMessageBoxA
SHGetSettings
SHGetDiskFreeSpaceA
SHFree
DragFinish
SHGetMalloc
ExtractIconA
StrChrA
DllUnregisterServer

printui

vQueueCreate
bFolderGetPrinter
bPrinterSetup
vPrinterPropPages
PnPInterface

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ