f6de903c7a487a9bdf9eb19995f781d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6de903c7a487a9bdf9eb19995f781d1_JaffaCakes118
Size

88KB
MD5

f6de903c7a487a9bdf9eb19995f781d1
SHA1

ee24435b923f24aed435e790e2a1cc7e2bd80a0c
SHA256

0387c3ddc2383118d84a59a6ef15157bc5770d899cddbc0ba6cac7d16ff14a59
SHA512

0ac47e52788606c971c9211aba122e0feb18f7365814bbb0bc2117c16d398d0462dd3023ca1107444ffa5e73024a2b1d42b384524e55c1915edc376f11779012
SSDEEP

1536:GOUtCCdVuUB24Ngwy6SogaaQg2Sz+FHf4U5c6wXye:ZQCCuS24NfyogaaQdSz+f4zvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6de903c7a487a9bdf9eb19995f781d1_JaffaCakes118

Files

f6de903c7a487a9bdf9eb19995f781d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c285122e84f36c7fa6db977d9515a927

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesA
GetDateFormatA
PulseEvent
FreeConsole
IsBadCodePtr
CloseHandle
Sleep
LoadLibraryExA
GetCommandLineA
GetModuleHandleA
FindClose
GetLastError
LocalFree
DeleteCriticalSection
IsBadReadPtr
GetDiskFreeSpaceExW
TlsGetValue
VirtualProtect
SetLastError
GetDriveTypeW

shell32

ShellAboutA
SHGetDiskFreeSpaceA
ExtractIconA
DragQueryFileA
DragAcceptFiles
ShellMessageBoxA
SHGetMalloc
DllUnregisterServer
DragFinish
DuplicateIcon
SHGetSettings
SHFree
StrChrA

msasn1

ASN1BERDecEoid
ASN1BERDecDouble
ASN1BERDecBool
ASN1BERDecFlush
ASN1BERDecCheck

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ