fe3b0c0c69e2f604b126755ca2611b03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe3b0c0c69e2f604b126755ca2611b03_JaffaCakes118
Size

209KB
MD5

fe3b0c0c69e2f604b126755ca2611b03
SHA1

3cc9e130023b45e971dbdd6f02a0765fcec022a1
SHA256

67026e871f080111901f299b5f6c7bb8a3563c823beab201ab6ce76f819cc14e
SHA512

bdf6c6edc2ca21f5ad12d047d3b8ee909986587f1d9ebcd7adbfe3d32512173331570502da0ad24e757cbef0713521837701ba7db387010fd68ef0806dca6746
SSDEEP

6144:pd4qghXpg7y2aV0QlvZlnzqPu6BinexYjA0:34q8X222EdZlnvMYF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe3b0c0c69e2f604b126755ca2611b03_JaffaCakes118

Files

fe3b0c0c69e2f604b126755ca2611b03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee224bf4136c6793ae380cf55aa32b25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawTextW

shell32

ShellExecuteExW

kernel32

DnsHostnameToComputerNameW
FindClose
FindFirstFileW
lstrcmp
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime

oleaut32

DispGetIDsOfNames
DispGetIDsOfNames
VarI1FromDec
CreateErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 151KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ