10597a42238c01dc8978881de24c6a7a_JaffaCakes118 | Triage

Sharing

General

Target

10597a42238c01dc8978881de24c6a7a_JaffaCakes118
Size

121KB
MD5

10597a42238c01dc8978881de24c6a7a
SHA1

e04af872cfbfc5470f0f0d8775b0e3805d132d70
SHA256

611232e301c759c77ff38e4ae3e786da4da85321994db27a62fd35c76441852f
SHA512

0b2fa58aec4f52a07461f762d1da06692d0c8aa93c944be3ffd4e18c7552254cc04626b953f039aeccf8c1da73895d334ded84963cf99490eaa132381940c78e
SSDEEP

3072:qI2OKLalxet3aqjo+NFudYX9dIQ+yneWGEh9mmxOXx:z2OKqx4jrX9OezLOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10597a42238c01dc8978881de24c6a7a_JaffaCakes118

Files

10597a42238c01dc8978881de24c6a7a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c5e4cf43e22eb1b0cea07975ee5d888e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
GetExitCodeProcess
GetACP
lstrcmpA
lstrcpyW
FindResourceW
GetDiskFreeSpaceW
GetLongPathNameA
GetCurrentDirectoryA
GetPrivateProfileIntA
Heap32First
WriteFileEx
GetStringTypeW
InterlockedDecrement
WaitForSingleObject
GetDiskFreeSpaceW
LoadLibraryA
GetPrivateProfileSectionA
VirtualAllocEx
GetPrivateProfileIntA
ExitProcess
GetModuleHandleW
InterlockedIncrement

apphelp

SdbCreateMsiTransformFile
ApphelpCheckIME
ApphelpCheckExe
AllowPermLayer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE