d9f1cfb6281f8c46d0f7da4f471c0c5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f1cfb6281f8c46d0f7da4f471c0c5a_JaffaCakes118
Size

363KB
MD5

d9f1cfb6281f8c46d0f7da4f471c0c5a
SHA1

c37e3931a7e5185b788c70d451720679fd99fe55
SHA256

a816d3f0196901af5b5ebf156d9c28ec21d9ba9a2a71db401f410d801f9f07e7
SHA512

7d0b33b26260a655722e7ec6f99a35b9b6620ec5571ad66b53c349bece37ea47bdad310850c6a8694dadd021af40f5f6119ae6536d1decf29f9ad7bf6a99424c
SSDEEP

6144:AiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:X+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f1cfb6281f8c46d0f7da4f471c0c5a_JaffaCakes118

Files

d9f1cfb6281f8c46d0f7da4f471c0c5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb880dad051937a8d421cb7415d26794

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
ReleaseMutex
DeleteCriticalSection
GetLastError
LoadLibraryExW
GetModuleHandleA
SetLastError
GetExitCodeProcess
CreateMutexA
FindClose
GetCommandLineA
TlsGetValue
EnumResourceTypesA
GetDriveTypeA
GetComputerNameA
VirtualProtect
Sleep
GetDiskFreeSpaceExW
FreeConsole

shell32

DuplicateIcon
ExtractIconA
DragAcceptFiles
ShellMessageBoxA
DragQueryFileA
StrChrA
SHGetMalloc
SHGetDiskFreeSpaceA
ShellAboutA
DllUnregisterServer
SHFree
DragFinish
SHGetSettings

printui

vPrinterPropPages
PnPInterface
bPrinterSetup
vQueueCreate
bFolderGetPrinter

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ