038ed6d3eb5c511c3525ba190665d4cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038ed6d3eb5c511c3525ba190665d4cc_JaffaCakes118
Size

65KB
MD5

038ed6d3eb5c511c3525ba190665d4cc
SHA1

545522cb32affeeaddfd0f0754fb8f3b2c9c542c
SHA256

1027ec0f61402b204c17af9d6678cf0191be2b950d773d9c3fd94ed0d44cd499
SHA512

60696b825913d890a2c9e8cd446aa5b23fba5e8b2d3ea5d56c61790ef91edf611d985700d2783cd7236985bfb99b389427b90c574da6670bcad07cce0a151a77
SSDEEP

1536:Uf49S6FFUyaFawvjjvg30x3HjwcomncVqgmE+f4U8T:+49ZFeFrkcomFE+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038ed6d3eb5c511c3525ba190665d4cc_JaffaCakes118

Files

038ed6d3eb5c511c3525ba190665d4cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

33106d8d32eac0f77d59fc206f82c3cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
CreatePipe
WriteConsoleW
GetACP
SetVolumeLabelW
FatalExit
InitializeCriticalSection
CreateFileMappingW
GetStringTypeW
DeviceIoControl
GetModuleHandleW
LoadLibraryA
GetProcessHeap
SetCurrentDirectoryA
CreateSemaphoreW
DeleteFileA
DeleteFileA
CreateMailslotA
GetConsoleAliasA
GetStringTypeA
GetShortPathNameW
VirtualAlloc
DeleteFileA

mshtml

ShowHTMLDialog
ShowModelessHTMLDialog
DllEnumClassObjects
ShowModalDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ