ce16fea1ad4f2c9e87f540e94aa50edb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce16fea1ad4f2c9e87f540e94aa50edb_JaffaCakes118
Size

128KB
MD5

ce16fea1ad4f2c9e87f540e94aa50edb
SHA1

45feb6d53d4ab329204bcd3b94976999ec1e8845
SHA256

9889270adc6f916e83aa8be036de7b36f33176b87844e7862ec5a094391879e1
SHA512

9a444ac111bec3c01afb73d2d226d3a422156ccc74412d93b6c98fd316f166c4137365dde037e9bcf5f36d347718f189c9afba75ae9d244c550399d93bfc2a05
SSDEEP

1536:Kr64jmxZOuI5DQnrpcksGXFuTKgen+8megc9Buo/8yVpiU22lhb:KrJSxZrkQrpw1TNQRHPEyVpiU22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce16fea1ad4f2c9e87f540e94aa50edb_JaffaCakes118

Files

ce16fea1ad4f2c9e87f540e94aa50edb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e37b8fc9f189c3225b43e57618c4e675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
TlsGetValue
GetDiskFreeSpaceExW
FreeConsole
Sleep
LoadLibraryExW
ReleaseMutex
GetCommandLineA
GetModuleHandleA
GetDriveTypeA
GetLastError
FindClose
EnumResourceTypesA
GetComputerNameA
GetExitCodeProcess
SetLastError
CreateMutexA
DeleteCriticalSection
GetTickCount
VirtualProtect

shell32

ExtractIconA
DragFinish
DllUnregisterServer
DragAcceptFiles
DragQueryFileA
SHFree
ShellMessageBoxA
ShellAboutA
SHGetDiskFreeSpaceA
SHGetMalloc
StrChrA
SHGetSettings
DuplicateIcon

printui

vPrinterPropPages
PnPInterface
vQueueCreate
bPrinterSetup
bFolderGetPrinter

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ