1267861198810de041f203a4026514b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1267861198810de041f203a4026514b8_JaffaCakes118
Size

412KB
MD5

1267861198810de041f203a4026514b8
SHA1

db7733cefb3f1197f35f23f25ce87c3c709f0d60
SHA256

bd4433fca7ff367f897590495dabbdba77fd23564e0e262c230150b2b5729060
SHA512

a7d6a541428af97ca286133007bac74ae4396a79567aa779d01d43561e5ebb2cf63dbff6f4a14100427338a34c01f5c534a32eda4adc375e2219593dd504e3a9
SSDEEP

6144:9KetdwZoEU+umvkwffDS3BUU4UwsSF6wrvgl58lqFsVv+yjJpFCpcrd0:ketaZox+PkabcBUSwz0P8UOHiQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1267861198810de041f203a4026514b8_JaffaCakes118

Files

1267861198810de041f203a4026514b8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

689e5033cdf65a97962c69d2e74ed67e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
CreateMailslotA
GetModuleHandleA
VirtualFree
GetCurrentDirectoryW
SetVolumeLabelA
CreateFileMappingA
GetFullPathNameW
Sleep
FindClose
CreateFileA
FindClose
GetModuleHandleW
CopyFileA
GetStringTypeA
GetShortPathNameA
HeapCreate
FindClose
CreateSemaphoreA
GetFullPathNameW
CreateEventA
CreatePipe
WriteConsoleA

mshtml

PrintHTML
ShowModalDialog
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 403KB - Virtual size: 924KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ