256e319c17ba465e2e84a76af3e76d30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

256e319c17ba465e2e84a76af3e76d30_JaffaCakes118
Size

2.4MB
MD5

256e319c17ba465e2e84a76af3e76d30
SHA1

ffb024239e5d6d30e71c056e06ec509206c887a4
SHA256

bac26cd643eebec7df196594b1fbd554920e266c5bbee9e267078c313f13436b
SHA512

fefb57bda31132611429b929b9cfec3b5bd77d1ffe921650e05cf00d51e1ab8b70a6471f3ee32575a4d50227ab4f822aeff61cc66fd7df1277ffb66277e4f439
SSDEEP

24576:jDTKAEdYc551+0w5U3vk6ESSxetDuCFg8Dly8bN1gAv/S:mTYkE94gcdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256e319c17ba465e2e84a76af3e76d30_JaffaCakes118

Files

256e319c17ba465e2e84a76af3e76d30_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aaccdff330ee32ee181c88c882dd09df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetTempPathW
WaitForSingleObject
LocalFree
GetLastError
GetEnvironmentStringsW
HeapReAlloc
VirtualAlloc
IsValidCodePage

comdlg32

ChooseColorW
CommDlgExtendedError
PrintDlgExW
PrintDlgW
ChooseFontW

psapi

GetMappedFileNameW
GetDeviceDriverBaseNameW
GetDeviceDriverFileNameW
GetModuleBaseNameW

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 63.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ