c97aa84218696ebbd8fb0914907256ff_JaffaCakes118 | Triage

Sharing

General

Target

c97aa84218696ebbd8fb0914907256ff_JaffaCakes118
Size

133KB
MD5

c97aa84218696ebbd8fb0914907256ff
SHA1

89b9e1d45911f1c6a95cf173bde16c9a68ec9826
SHA256

9f208d74c976ac8f592b099764a8716f81938dc401a09c97f5eeaf3e6faf3a3d
SHA512

3f39c779f5bd74d1887bf5064034382c15ea09ee77edd9cf0319595fdc6b5cf68bfa98fdf7b66ed7c4ee42ff30915ccbe595047de2416cc2d709720df74d5112
SSDEEP

1536:iiPdznJj2/XDrcGSo6rDil5TyQ2Jj49LR8x3q7VoagHf3:iiPbj2PvcGS7rDivyQek9sa7Voa8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c97aa84218696ebbd8fb0914907256ff_JaffaCakes118

Files

c97aa84218696ebbd8fb0914907256ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22b2034d312f698ef4fdb3f40954a47d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
CreateThread
GlobalFree
GetFileSize
GetLastError
ReadConsoleA
DeleteFileW
CreateProcessA
GetCPInfo
ReadFile
GetCommandLineA
GetFileTime
GetStdHandle
GetConsoleMode
Sleep
WriteFile
ExitThread
GetComputerNameA
SetLastError
DeleteFileA
DeleteAtom
OpenFile
FindFirstFileA

user32

GetDlgItem
EndDialog
GetDC
GetMenu
DialogBoxParamW
CloseWindow

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 32.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ