dd414302b5ab4afc53c86815d067f04f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd414302b5ab4afc53c86815d067f04f_JaffaCakes118
Size

224KB
MD5

dd414302b5ab4afc53c86815d067f04f
SHA1

21f1bc51f828c46e9eae7f4941dae2d27637ca29
SHA256

0db17679e42729e7ee47a1057547b05042961c4925598e0046cfb6dbd38f518d
SHA512

e5f94f90f3d0f229ae07adbed808401ce57c67554cb605833b5d047406b4c0f1df379d19cc4862bf2286c8f30fa95a5411120e61599126812ed0a2e76cd09e11
SSDEEP

6144:7WSp4aG+abhWOmiYV/EHZlNV85Q3r7Z5Hn:YaNcS+NV85Q3r7Z5Hn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd414302b5ab4afc53c86815d067f04f_JaffaCakes118

Files

dd414302b5ab4afc53c86815d067f04f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

29bf0c7c456f1fc401a509f7651eea07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
CloseHandle
LocalAlloc
LocalFree
OpenEventW
QueryPerformanceCounter
RegisterConsoleIME
SetCurrentDirectoryW
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnregisterConsoleIME
WideCharToMultiByte
lstrcatW
lstrcpyW
lstrcpynW
lstrlenW

shell32

SHChangeNotify
ShellExecuteExW
DragQueryFileW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromCLSID

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ