f70ad886973c1f16af6d9250d4e1c5f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f70ad886973c1f16af6d9250d4e1c5f6_JaffaCakes118
Size

347KB
MD5

f70ad886973c1f16af6d9250d4e1c5f6
SHA1

c4a1b30c22d4f84237e104c3920f639181395884
SHA256

6ac384dba7dde0457ad36dee30f6a53909cd754c3e752756dfe10e053396fdbc
SHA512

97e7f4802cd6ff3b626984c54457ea95b9d3fc40c02b7be8da99aac736362aed8fd778c59ce228e1a20ef8caebabe670f5c7030ef2516e76f55e0b7a2d10a5b8
SSDEEP

6144:OafKWD4Z7HM5vO18jdxLbAtdShxciaQ+xPcQ2hWQLqt3Nhr:+TZ7HM5vU8h9gwcJ6QlQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70ad886973c1f16af6d9250d4e1c5f6_JaffaCakes118

Files

f70ad886973c1f16af6d9250d4e1c5f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d2bbb5d8d3395328424c17fffd4a3aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
GetCurrentThreadId
GlobalFree
GetExitCodeProcess
lstrlenW
SetLastError
GetStdHandle
GetEnvironmentVariableA
CreateMutexA
CreateFileA
CloseHandle
HeapCreate
GetProcessHeap
DeleteAtom
TlsGetValue
LoadLibraryExA
FindResourceA
ReleaseMutex
GlobalUnlock
GetModuleHandleA

user32

CreateWindowExA
SetFocus
CreateMenu
GetDC
DrawMenuBar
IsWindow
FillRect
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetCaretPos
CheckRadioButton

ntshrui

SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
IsPathSharedW
IsPathSharedA
GetLocalPathFromNetResourceA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ