d17611a3c56c2c776d8639e549489ba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d17611a3c56c2c776d8639e549489ba4_JaffaCakes118
Size

96KB
MD5

d17611a3c56c2c776d8639e549489ba4
SHA1

ae32661d2a23360e8ae9bfc5a375879a2c54b9b8
SHA256

19315a7fb5e927b8328cd7b5a1f53a908538b3f8d82adf5cbac61588b7d57114
SHA512

d94d71bf24de7f59411d4d85bd10fad685a782ea74ba23ba7c6a002014f7df683bd035799949463eaf6dee195329ab7b09795164637414de0abf3a808b70eaaf
SSDEEP

3072:TifzlMCzGSs38OtsfUnybLQEcHl4XK1rf/:O7e1SsZNnmLMrf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d17611a3c56c2c776d8639e549489ba4_JaffaCakes118

Files

d17611a3c56c2c776d8639e549489ba4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e79e91200b4d8718109d3d7c736f1dea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
CallNamedPipeA
CommConfigDialogA
ExitProcess
GetComputerNameW
GetConsoleTitleW
GetDevicePowerState
GlobalAddAtomA
InitializeCriticalSection
IsValidCodePage
LoadResource
OpenEventW
PeekConsoleInputW
SetLocaleInfoA
TlsSetValue

shell32

DragAcceptFiles
ExtractVersionResource16W
SHAppBarMessage
SHBrowseForFolderA
SHChangeNotify
SHGetDataFromIDListA
SHGetSettings
SHHelpShortcuts_RunDLLW
SheChangeDirExA
SheSetCurDrive

gdi32

ColorCorrectPalette
CreateColorSpaceA
CreateDCW
CreateDIBPatternBrushPt
CreateEnhMetaFileW
EndPath
GetCharWidth32A
GetDIBits
GetGlyphOutlineW
GetObjectA
Pie
PolyPolygon
SetBitmapDimensionEx
SetBrushOrgEx

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ