c219fadfefd243bf878abf2d658722ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c219fadfefd243bf878abf2d658722ae_JaffaCakes118
Size

3.4MB
MD5

c219fadfefd243bf878abf2d658722ae
SHA1

b952ceb25a2c4e79a0503db711bc523d5ee24552
SHA256

7a99ecdc1b15e6a8ade3ecef584cc31a99c3c3e16ec24b4ec54ae9502d4e834b
SHA512

76933b83722a4bd33a07ab7d00d44669007af5ac39901d4364cb420cc823547406e7bcceefc92f951c9253880e024646a7c80e42caa1b2b2b24a9ed5fd35ff2c
SSDEEP

49152:jCG5+Zy49GLj/tJ0PBhTgwUHvndxH6uKqDu1VZuAFWdimcqKRhAX7Z9C9aKjHzXU:YiBESRohPrUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c219fadfefd243bf878abf2d658722ae_JaffaCakes118

Files

c219fadfefd243bf878abf2d658722ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be2a55b645a37cf386ae796798eca612

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA
SHGetSpecialFolderPathA

shlwapi

StrChrIA
StrStrA

kernel32

lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
SizeofResource

urlmon

CoInternetCompareUrl

comctl32

GetMUILanguage

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE