e573edd661f190e44055c26c6acb03c1_JaffaCakes118 | Triage

Sharing

General

Target

e573edd661f190e44055c26c6acb03c1_JaffaCakes118
Size

270KB
MD5

e573edd661f190e44055c26c6acb03c1
SHA1

f3534ee299dcab25bcf46bb6f205e1ebe277eede
SHA256

9655d0e503bcf9a331e4725e68a1bc4218d55249c618abcf9c77f7980805f12f
SHA512

3b543b719f93259d0aff558d6594986f4ac63be65fbcdd6e39154146245203a2382f370ee4903af95b893c3c376601123fb3443e8b9401b0abbfa5a35bf089a9
SSDEEP

3072:A4Dv1tZ3wHdm1cCYfbuTapNHfWvffhQ9UxQaAnBeFeCl8lUBWU6Nm+SLwL2W2oMR:9nWmbYKGmiUxQ7Be0g8N7pSLY2TBAmN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e573edd661f190e44055c26c6acb03c1_JaffaCakes118

Files

e573edd661f190e44055c26c6acb03c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad5b9646b9e9dcda4e0ccabc8cd63b71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetEnvironmentStringsW
HeapCreate
AddAtomA
SetLastError
HeapSize
TlsGetValue
FreeEnvironmentStringsW
VirtualFree
GetLocaleInfoA
TlsSetValue
GetStartupInfoA
GetCurrentProcess
TerminateProcess
IsBadWritePtr
GetSystemInfo
EnumResourceNamesA
VirtualAlloc
InterlockedExchange
GetVersionExA
SetEndOfFile
SetHandleCount
GetACP
GetStdHandle
GetEnvironmentStrings
IsBadStringPtrW
TlsAlloc
GetFileType
TlsFree
FreeEnvironmentStringsA
UnhandledExceptionFilter

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

winmm

mciSendCommandA
sndPlaySoundA

shlwapi

PathAddBackslashA

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ