163c103de406be94112cb6f66287dcf3_JaffaCakes118 | Triage

Sharing

General

Target

163c103de406be94112cb6f66287dcf3_JaffaCakes118
Size

304KB
MD5

163c103de406be94112cb6f66287dcf3
SHA1

00baf86b7418dec136f1f48ba413edfb9be73ac2
SHA256

a774695c610bf7ed31ec7412ba9920f749790947da651f59f00e883ac63ed874
SHA512

8c1ddefe8cdb747cdf4d1a7e402570602a0684b949aca26557978e1859098bb5c01ed45e060a4341762992e44cf75a5146cd6b7ca07dfe5c620bd3a5a5a7475e
SSDEEP

6144:blJ0ayXnRlvAbZtIHxdVMk58gI0+cwMJhGt1Mip:bl9yXRlYb8RnMkyZ0QYGt1Mi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
163c103de406be94112cb6f66287dcf3_JaffaCakes118

Files

163c103de406be94112cb6f66287dcf3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0af8cb6dce542782c3dddf07edf8701e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetShortPathNameA
VirtualAlloc
CreateMailslotA
InitializeCriticalSection
DeleteFileA
SetCurrentDirectoryA
DeleteFileA
GetModuleHandleA
DeleteFileA
CreatePipe
WriteConsoleW
FatalExit
SetEnvironmentVariableA
GetStringTypeW
GetModuleHandleW
CreateFileMappingW
SetVolumeLabelA
GetProcessHeap
CreateSemaphoreW
GetACP
DeviceIoControl
InterlockedExchange

mshtml

ShowHTMLDialog
DllEnumClassObjects
ShowModelessHTMLDialog
ShowModalDialog

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrs
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ