cef1a7b43ea3de35685a1427f52e8c9b_JaffaCakes118 | Triage

Sharing

General

Target

cef1a7b43ea3de35685a1427f52e8c9b_JaffaCakes118
Size

798KB
MD5

cef1a7b43ea3de35685a1427f52e8c9b
SHA1

137ff3b86dda3e824ebd3bb825c35fd4641b6f70
SHA256

ab78644184af1035bbb16df8bb755435664d24ac18ccceb4db54432d8e6a68b9
SHA512

f808140cbdaad976c7f219461ded2a6a24795cda25f0bb22f7f2a9dc0d0c60e873a3356cee53b2b3a8fe5f4e91a1fea0b5ad42d28e14d2aace03e7138a61cdb6
SSDEEP

12288:O4VjVcf58ov8PmC6PvFT2S9oePb2JQVT4PFhsG7hbVTB09DCZQCQ6spa5OXI:O4Tcx8oSmbgETcdPF+GdxBZZQCCqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef1a7b43ea3de35685a1427f52e8c9b_JaffaCakes118

Files

cef1a7b43ea3de35685a1427f52e8c9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eeb588449545e4b7ac1032efde630831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetDriveTypeA
CreateMutexA
FreeConsole
SetLastError
TlsGetValue
GetExitCodeProcess
ReleaseMutex
GetComputerNameA
GetModuleHandleA
GetLastError
GetTickCount
VirtualProtect
LoadLibraryExA
DeleteCriticalSection
FindClose
EnumResourceTypesA
GetDiskFreeSpaceExW
GetCommandLineA
CloseHandle

shell32

SHGetSettings
DuplicateIcon
DragAcceptFiles
SHFree
SHGetMalloc
DragFinish
DragQueryFileA
ShellMessageBoxA
DllUnregisterServer
ShellAboutA
SHGetDiskFreeSpaceA
StrChrA
ExtractIconA

printui

vQueueCreate
vPrinterPropPages
bFolderGetPrinter
PnPInterface
bPrinterSetup

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE