bf7db8ad8e64863031aa3802f81ad01e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7db8ad8e64863031aa3802f81ad01e_JaffaCakes118
Size

363KB
MD5

bf7db8ad8e64863031aa3802f81ad01e
SHA1

e5e684f001f1b85590260f56e83d962acb6c340a
SHA256

2f511e19586dcfed9a4c3b925b864c235f39086b144791d6086d0e54606d9bd9
SHA512

403ae80c0ceb1ec3d65bd150f0281e298450d220819a89f9b247314bd7c1bdb9a9ab5d2a51be57ee5f5494790b4cd73d10dfba908591593adf41bf09c6ce7571
SSDEEP

6144:ziJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:++n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7db8ad8e64863031aa3802f81ad01e_JaffaCakes118

Files

bf7db8ad8e64863031aa3802f81ad01e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d55d1bf0fe65ecad011bfa44d4e7c6ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
EnumResourceTypesA
FreeConsole
GetCommandLineA
DeleteCriticalSection
GetComputerNameA
GetDriveTypeA
TlsGetValue
CreateMutexA
SetLastError
VirtualProtect
GetTickCount
FindClose
ReleaseMutex
CloseHandle
GetExitCodeProcess
GetDiskFreeSpaceExW
GetModuleHandleA
Sleep
LoadLibraryExW

shell32

SHFree
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
ExtractIconA
DragFinish
DragAcceptFiles
ShellAboutA
DuplicateIcon
DllUnregisterServer
SHGetSettings
StrChrA
SHGetDiskFreeSpaceA

printui

bPrinterSetup
PnPInterface
bFolderGetPrinter
vPrinterPropPages
vQueueCreate

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ