c9759380585142f3086c77ca6e4bf1a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9759380585142f3086c77ca6e4bf1a9_JaffaCakes118
Size

116KB
MD5

c9759380585142f3086c77ca6e4bf1a9
SHA1

5a32b76c056b17d390f7ac5f14af15fdff01496c
SHA256

c29a58221379377ea302284791e1e73e734423601a8ea07c092e148749f58db7
SHA512

630b299030605bb2638e8275524b345fdc1559f1dbb59e7dff7221402376f11925aac46de86b68b68496e0d9c151f81ff47f1853019fb6e49879063ddce9d7e6
SSDEEP

1536:kMvbcqDVAKygs58lhjCtBwTIu9SDDo7JWpKWWHZEI9j:lg208PCYI0SDDdhSZ9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9759380585142f3086c77ca6e4bf1a9_JaffaCakes118

Files

c9759380585142f3086c77ca6e4bf1a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64e3ba1c8924874dec68147d28e5b8c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
ExitProcess
VirtualAllocEx
GetCommandLineW
SetTapePosition
GetSystemDirectoryA
GetVersionExA
GetPrivateProfileSectionNamesW
GetStartupInfoA
MoveFileA
WaitForMultipleObjectsEx
RequestWakeupLatency
GetCurrentProcess

user32

ToAscii
SetSysColorsTemp
InvalidateRgn
LockWindowUpdate
GetUpdateRgn
GetDCEx
SetClassLongA
GetScrollBarInfo
SetWindowTextA
GetMenuItemCount
SetWindowWord

shell32

SHGetFolderLocation

Sections

.text
Size: 104KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbbs
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ