d1fef8ade278ccd105416b2d23f1145d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1fef8ade278ccd105416b2d23f1145d_JaffaCakes118
Size

167KB
MD5

d1fef8ade278ccd105416b2d23f1145d
SHA1

dc575869776022dff2a7a3f20d28a76e112ea94a
SHA256

9727d207d4fe2348cf13bbb57431465677fe1ec15578d7b1104d30829ba3ee9a
SHA512

7924c1c521523a959ee5549fb8acc7a0b7e14ccfae25dfb9f72640c5f403baca9915c0edb812cf8c9d01288a88238a20c247ecbb75c4732348728288a21358eb
SSDEEP

3072:LTuQdgLQC/5U992iPvNykmntNAGzeay7gLXdiad48HccJ:XuvLQC/OXz3BiXdJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1fef8ade278ccd105416b2d23f1145d_JaffaCakes118

Files

d1fef8ade278ccd105416b2d23f1145d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b7e2125a6198978f19cfd4c951aa80c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindFirstFileW
FileTimeToSystemTime
ConvertFiberToThread
SetCurrentDirectoryW
SetThreadPriority
SetErrorMode
LoadResource
SystemTimeToFileTime
FindNextFileW
SetEnvironmentVariableW
GetLocalTime
EnumResourceNamesW
CompareStringA
GetStringTypeW
FileTimeToLocalFileTime
FindClose
LocalFileTimeToFileTime
RegisterWaitForSingleObject
GetShortPathNameW
FreeLibrary
FindResourceW
SearchPathW

user32

ValidateRgn
ValidateRect
ReleaseCapture
GetCapture
ExcludeUpdateRgn
InvalidateRgn
RealGetWindowClassA
SetCapture
GetUpdateRgn

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ