f041c80240df1a59eb519ca7f9098b74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f041c80240df1a59eb519ca7f9098b74_JaffaCakes118
Size

816KB
MD5

f041c80240df1a59eb519ca7f9098b74
SHA1

7746a144818569b08b93aac16a0afe7afc8ce73e
SHA256

ee9b9f96846db9e7996619fe4a98a92d7adbd0ae8eb55ad2d1f4d912ba686770
SHA512

cc46867d7a27c2c0c8d58c80166fb6d6edd117e73b14ae3de359995ca173c8cf9c316d729b8e4c002c99cd5f570062ccb2183f14fd4c0ead50d1d2b80c3ad24e
SSDEEP

24576:Uj2kuHz4cEyp8HWwzLVrlh7f718cmaj/uOay/:2upG2wzLBf718ctzuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f041c80240df1a59eb519ca7f9098b74_JaffaCakes118

Files

f041c80240df1a59eb519ca7f9098b74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce77d0bde2f237755b14fb3052628517

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
GetLastError
GetLastError
GetLastError
GetFileTime
GetVolumeInformationW
GetLastError
GetLastError
GetCurrentDirectoryW
GetConsoleTitleA
CreateSemaphoreA
VirtualProtect
GetLastError
LoadLibraryA
lstrlenW
CreateMutexA
GetLastError

objsel

DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer

Sections

.play
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.DATA
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE