dc0a8c6a6730e09d88988131004de329_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc0a8c6a6730e09d88988131004de329_JaffaCakes118
Size

363KB
MD5

dc0a8c6a6730e09d88988131004de329
SHA1

c6c64326067773894f50aff341ae681ff83f238c
SHA256

c91c44c7cf798642e83a8ec1b9fdcfe6551876d7eefe6a9f7eb751d0fb9d7931
SHA512

1506d26251e60b0c449bb7eb3f15887b91e7c108b5abcd746e39532f315c543082b3bd3684f4ae0120c4d134f1511ae9edf750b98659746b0b9523030510f0c2
SSDEEP

6144:PiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:K+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc0a8c6a6730e09d88988131004de329_JaffaCakes118

Files

dc0a8c6a6730e09d88988131004de329_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d55d1bf0fe65ecad011bfa44d4e7c6ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
EnumResourceTypesA
FreeConsole
GetCommandLineA
DeleteCriticalSection
GetComputerNameA
GetDriveTypeA
TlsGetValue
CreateMutexA
SetLastError
VirtualProtect
GetTickCount
FindClose
ReleaseMutex
CloseHandle
GetExitCodeProcess
GetDiskFreeSpaceExW
GetModuleHandleA
Sleep
LoadLibraryExW

shell32

SHFree
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
ExtractIconA
DragFinish
DragAcceptFiles
ShellAboutA
DuplicateIcon
DllUnregisterServer
SHGetSettings
StrChrA
SHGetDiskFreeSpaceA

printui

bPrinterSetup
PnPInterface
bFolderGetPrinter
vPrinterPropPages
vQueueCreate

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ