e140131cd904dff21c350bfe0a082779_JaffaCakes118 | Triage

Sharing

General

Target

e140131cd904dff21c350bfe0a082779_JaffaCakes118
Size

176KB
MD5

e140131cd904dff21c350bfe0a082779
SHA1

7ad95773233a5c37fb10a78228b6e64d65091b6c
SHA256

1a1840458aa06337ff99d1d4503cc28a857bd8e41c8070a5c3efb8e61ca306b1
SHA512

e454f6c3bdfcddad6d2a8a185dd226f2eeac8cd70e4e225e0eb418e1bcaff919c33284a3c506a4b9fa074437e21b5ec25a0e908197b3922b78118873f02dae08
SSDEEP

3072:pUnJaoD2C8PKM/AnAMm8jKiCNi+4f+5b2:psaoCCkBrXcCA+4W5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e140131cd904dff21c350bfe0a082779_JaffaCakes118

Files

e140131cd904dff21c350bfe0a082779_JaffaCakes118
.exe windows:6 windows x86 arch:x86

8d371cd1a07742fb7486ba2928200268

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardGetProviderIdA

winspool.drv

DeletePrinterDriverExW

gdi32

GetTextCharset

advapi32

InitiateSystemShutdownA
EnumServicesStatusExW
LookupAccountSidW

kernel32

IsThreadAFiber
GetLargestConsoleWindowSize
FindResourceExA
GetFileSize
GetCommConfig
FindFirstVolumeMountPointW
lstrcmpW
GetBinaryTypeW
LocalLock
LocalHandle
GetUserDefaultUILanguage
FormatMessageW
DeleteVolumeMountPointW

secur32

FreeContextBuffer

user32

GetClipboardViewer
IsCharLowerW
GetLastInputInfo
GetMenuBarInfo
GetTabbedTextExtentW
DrawTextExA
GetKeyboardLayoutList

msvcrt

fwprintf
ungetwc

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ