10123b62155d022aa4ae597846d6bf18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10123b62155d022aa4ae597846d6bf18_JaffaCakes118
Size

305KB
MD5

10123b62155d022aa4ae597846d6bf18
SHA1

fc008f17f4d135d1c84281b2b45001ebda4badbb
SHA256

4b121d00a6da70f61cf67fa87e585e92bc546408bdb7ab29fe32dadecd7da4f3
SHA512

0da51740af619710fee25824744498e16b9f554b0f54b86b07dc9c23dd16dd0de2dd6e8f6d484ce4b13a0c6137f1c15f9abc149d794cb00afe0a8ba5cfc2341e
SSDEEP

6144:wEsdB6Qihy1qaCwBPwi6gVjf/N8j/tdkqRIrH+d:Ls2hywGX6gVWDsqWbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10123b62155d022aa4ae597846d6bf18_JaffaCakes118

Files

10123b62155d022aa4ae597846d6bf18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21496317d29d7b5ecfb1607dfc6b5019

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetShortPathNameW
Heap32Next
GetVersion
HeapFree
GetStringTypeW
LoadLibraryA
CreateFileMappingW
SetCurrentDirectoryA
WriteConsoleW
SetEnvironmentVariableA
DeleteFileA
SetFilePointer
DeleteFileA
GetStringTypeW
GetACP
GetProcessHeap
GetModuleHandleW
GetConsoleAliasW
DeleteFileA
CreateMailslotW
GetConsoleTitleA
HeapCreate

mstscax

DllCanUnloadNow
DllGetTscCtlVer
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ