d1f828ac4be565884bd1f169c17b8998_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1f828ac4be565884bd1f169c17b8998_JaffaCakes118
Size

1.8MB
MD5

d1f828ac4be565884bd1f169c17b8998
SHA1

106b272ae48687c31d48885a5d00451e3ebc39c0
SHA256

3c05abb887b0034f5986446d43821c71607a8142521582bf1ec102ba3c2ca8a9
SHA512

eabce577ece5f5408f6e87d32a2ef03eb4ee90a375861f943cfe2f9653372e1cc5ed82fa77d1cdf0a8b317b7472060d0a12b9f84ff1069c8ff46ab667af09e8c
SSDEEP

12288:U226Rt6Y96G43z0mtSmQ6MUEAcs/LKraQVyQQ8OXL2+/i:72YV4j0ASmQ6MUETiLKraQIQvMLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1f828ac4be565884bd1f169c17b8998_JaffaCakes118

Files

d1f828ac4be565884bd1f169c17b8998_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77529c57118c754cc8c7e28e26450b34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
QueryPerformanceFrequency
HeapFree
HeapAlloc
GetProcessHeap
DeviceIoControl
GetCommConfig
GlobalAlloc
SystemTimeToFileTime
GetSystemTime
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
GetWindowsDirectoryA
CompareFileTime
DeleteFileA
ReadFile
GetFileSize
FileTimeToSystemTime
CreateDirectoryA
CopyFileA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
ExitThread
EnumCalendarInfoExA
ReadConsoleInputA
GetFileInformationByHandle
CreateFileMappingW
GetCurrencyFormatA
CreateDirectoryW
FindAtomA

Sections

.code_01
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ