ce8994179018c27ce557c85220779762_JaffaCakes118 | Triage

Sharing

General

Target

ce8994179018c27ce557c85220779762_JaffaCakes118
Size

130KB
MD5

ce8994179018c27ce557c85220779762
SHA1

a9bf6b2e079c1e2a993e3ef300e7b96a38fa9e3f
SHA256

41aa425df1bb29761642f7b7e4cac959b0bd0f01c2875b81554623a8f6126aef
SHA512

1c44e3b9f08146496cb6813ac290ef4a74d87ee1f457da7d7226b34259cb4d8aa2483e581f245a62813bd1931c6c20b6cfc6c64ce8a0d092e32c16bfd4fd0f3a
SSDEEP

1536:6I3OUoY56pVnlR1ULs5ZQmdlDx9o85+YoPOBIhpXky5zCBeURwYP7mGTu:6pV9pV95xdlDxG85APZd6wm7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce8994179018c27ce557c85220779762_JaffaCakes118

Files

ce8994179018c27ce557c85220779762_JaffaCakes118
.exe windows:4 windows x86 arch:x86

332a82b5c3c78d9f9b7fc7871d1df8ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
TlsGetValue
VirtualProtect
GetDiskFreeSpaceExW
IsBadCodePtr
GetDriveTypeW
LocalFree
GetDateFormatA
PulseEvent
EnumResourceTypesA
SetLastError
FindClose
GetModuleHandleA
LoadLibraryExA
DeleteCriticalSection
GetCommandLineA
Sleep
CloseHandle
IsBadReadPtr
FreeConsole

shell32

SHGetMalloc
SHGetDiskFreeSpaceA
DllUnregisterServer
DragQueryFileA
DragFinish
ExtractIconA
DragAcceptFiles
ShellAboutA
DuplicateIcon
ShellMessageBoxA
SHGetSettings
StrChrA
SHFree

printui

bPrinterSetup
vPrinterPropPages
PnPInterface
bFolderGetPrinter
vQueueCreate

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ