14b395d53a9ecc0ee0fa7e1b75a8d226_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b395d53a9ecc0ee0fa7e1b75a8d226_JaffaCakes118
Size

156KB
MD5

14b395d53a9ecc0ee0fa7e1b75a8d226
SHA1

c956f09bfc07795aa0ead9a20bb8c1a93853ac47
SHA256

ae4d72c13185a1ddd43b228d3c1e56d613a14fde0db418b6e35d09b9b44d6be4
SHA512

dbc564aa8916b59142652a05c09bb4b152a11adfa0d441006dc2b6a0490b6c812dd4d6dc85569423bdcc9cec517195bf9711238ad6313f583e38f4f1101f93f4
SSDEEP

3072:iKHmj+SIIpx1Lm3Edft5jNbKuotlE+4AYDRfxJlR6k9kiOmuuIIn:uj+NIpf8Edf7jNbVeH4Zx3R4dk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b395d53a9ecc0ee0fa7e1b75a8d226_JaffaCakes118

Files

14b395d53a9ecc0ee0fa7e1b75a8d226_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7caf232b1f5f3e0a21a171377a3a41e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynW
lstrcpyA
GetLastError
GetCPInfo
lstrlenW
MultiByteToWideChar
CheckRemoteDebuggerPresent
DeleteCriticalSection
OutputDebugStringW
LockResource
EnumResourceTypesW
lstrcpyW
GlobalAlloc
GetTickCount
lstrcmpiW
WideCharToMultiByte
InitializeCriticalSection
GetACP
FindClose
GlobalFree
GetModuleHandleW

winspool.drv

DocumentPropertiesW

user32

GetAncestor
KillTimer
GetMessageW
PostThreadMessageW
TranslateMessage
SetTimer
wsprintfW
DispatchMessageW
CharUpperW
GetDC
CharNextW
UnregisterClassA

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ