d3edc21b54a420a5c765db46ed0df2c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3edc21b54a420a5c765db46ed0df2c4_JaffaCakes118
Size

315KB
MD5

d3edc21b54a420a5c765db46ed0df2c4
SHA1

a2ade53203b7d9f671f1a313d416b9aee6b543d1
SHA256

d61eb2e7b9bdab91e149192019968185830aeb93c9998ca87ce1633ee5886433
SHA512

196a699897edf505881518e77555612195b0e5376d83aa755c72da794d541a2f8b4801848d4161dbf1452c1146c7bd49d0294306d6838aea7636fe33b745934c
SSDEEP

6144:RChhwF9/2I71avCMdchax+xZ8kNtTrKRbU3Q0kwJkprB2KA:RC7weU1A3dipaRbN0Hkpk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3edc21b54a420a5c765db46ed0df2c4_JaffaCakes118

Files

d3edc21b54a420a5c765db46ed0df2c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22fba9f3079aeefcc16f32e7f6df5147

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

GetWindowRect
ShowWindow
EnumWindowStationsW
IsIconic
SetRect
GetClientRect

kernel32

GetCurrentThreadId
GetModuleHandleA
GetFileInformationByHandle
GetUserDefaultUILanguage
GetCommandLineA
CloseHandle
CreateFileMappingA
ExitProcess
Sleep
OutputDebugStringA
GetVersionExW

certcli

CAGetCACertificate

Sections

.text
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edit
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ