0301f15a7d230dc76334d5ca6d599a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0301f15a7d230dc76334d5ca6d599a03_JaffaCakes118
Size

817KB
MD5

0301f15a7d230dc76334d5ca6d599a03
SHA1

fa60827404281a6d705f9cc1df4e6de78a48dde0
SHA256

d9b85b4a5b5515882e83c97015c565644487a8f50a9faaa60535fec19aa8a248
SHA512

b4976ffe8348fd33370b63b9a87eb2b7a09e8f51407db5fafb86ff4f6496d1fc2f0e66b5995ad757ab74778a64afc21c90be3f660d4f65a16b23461a6e7a405d
SSDEEP

24576:LBLJq8IhaM34KpY7vYUswDPCWakQMv9l6r0pf:VNq8IX4Hv94WwMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0301f15a7d230dc76334d5ca6d599a03_JaffaCakes118

Files

0301f15a7d230dc76334d5ca6d599a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1452855ecd69a81b4db4ecdf434fc251

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPrivateProfileIntA
lstrcpynA
GetFileType
VirtualProtectEx
FormatMessageW
lstrcmpA
GetModuleHandleA
lstrcpynA
lstrcpynA
lstrcpynA
VirtualFree
OpenMutexW
lstrcpynA
lstrcatA
GetCurrentDirectoryA
GetFileSize
GetDiskFreeSpaceW
GetCommandLineW
lstrcpynA
ReadConsoleA
CreateDirectoryW
DeleteFileW
lstrcpynA
GetCurrentThreadId
lstrcpynA
lstrcpynA
SetThreadPriority
lstrcpynA
ReadFile

certmgr

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ