c095c389620ef252c404e2cb6d3bd7a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c095c389620ef252c404e2cb6d3bd7a0_JaffaCakes118
Size

33KB
MD5

c095c389620ef252c404e2cb6d3bd7a0
SHA1

87d74b4a25a057dc7f881206bea34c563db3ff37
SHA256

2722718cb09596804dd9d32051c4b9770a991f20073dcc46309b76bafd285ce9
SHA512

8a993dc2e7b62833f7f340100e8655f81edef4437ffb11c7db47f66bbc6405252c3ad5e61e0cc140ac70823a42498d7eb0e385a4993c2d23fd759508dd437fb4
SSDEEP

768:MY2V5/zZoflGA3iYiqZ4Xa+RYeCR2cQNh6R9HCZVhH9x:M5/zZoflGAyI4qU1Vv6PHWhd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c095c389620ef252c404e2cb6d3bd7a0_JaffaCakes118

Files

c095c389620ef252c404e2cb6d3bd7a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE