e03c99721c5b30f3dbd7713c0f43beee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e03c99721c5b30f3dbd7713c0f43beee_JaffaCakes118
Size

70KB
MD5

e03c99721c5b30f3dbd7713c0f43beee
SHA1

bb6e31162b3e7d8dcf8a50f7be98708be694c68f
SHA256

2f37e4b97b4038048c43ca6b6fc4eb742a114f9af65f005879798f88403d5deb
SHA512

14a55292eac19a29e0538561d754cdb99c4238b0427d9352145ea05ad6353425e2804e95cc9e35fd1468bd77ef1cf1c6c30b6829bc9864cacceed6fee86a21d0
SSDEEP

1536:Cm3CKzB575xxhI4o4lV9vjza3I/0CdJTQrBokenCy:Cl253fxbvldJi+kenCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e03c99721c5b30f3dbd7713c0f43beee_JaffaCakes118

Files

e03c99721c5b30f3dbd7713c0f43beee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6535ae5e31a6fad5e14ad93130df8bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
FindClose
TlsGetValue
GetTickCount
CloseHandle
GetCommandLineA
GetComputerNameA
Sleep
GetLastError
GetExitCodeProcess
GetModuleHandleA
SearchPathA
GetDriveTypeA
CreateSemaphoreA
GetModuleFileNameA
DeleteCriticalSection
SetLastError
CreateMutexA
VirtualProtect
FreeConsole

shell32

SHGetMalloc
DragAcceptFiles
StrChrA
ShellAboutA
ShellMessageBoxA
DragQueryPoint
SHGetDiskFreeSpaceA
DragQueryFileA
SHFree
SHAlloc
DragFinish
SheChangeDirA
SHGetSettings
SHGetNewLinkInfo

mgmtapi

SnmpMgrRequest
SnmpMgrClose
SnmpMgrOpen
SnmpMgrGetTrap
SnmpMgrCtl

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ