cf9b0146f1f4cde9ec27e454db3f49ea_JaffaCakes118 | Triage

Sharing

General

Target

cf9b0146f1f4cde9ec27e454db3f49ea_JaffaCakes118
Size

404KB
MD5

cf9b0146f1f4cde9ec27e454db3f49ea
SHA1

24cd18c916eef8deb92a6e1e2a2f56a0a14be30c
SHA256

7acf4db7dda4450c97b3d2f253e15b2e054852ccf758a6b3182314972ea04178
SHA512

c09bffb035e8f75ee7b499156cd4011a6ec59020ce1c9562adcf1be36ee31026629ece7270c796914ee33161c6970ac842f72f817fb29e942152d9cf3000a5c0
SSDEEP

12288:B8OkKx0EtBpUIeJJAoAqlw1oa6SUGOzcoha:B8OOEZXewqSsJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9b0146f1f4cde9ec27e454db3f49ea_JaffaCakes118

Files

cf9b0146f1f4cde9ec27e454db3f49ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c706c6f67b7d173b6ab503ee04d3cd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
CloseHandle
GetModuleHandleA
GetFileSize
CreateFileA
Sleep
GetProcAddress
VirtualFree
VirtualAlloc

netapi32

NetDfsRemoveFtRoot

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ