38352c6cfc641717762f3765ea87990e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38352c6cfc641717762f3765ea87990e_JaffaCakes118
Size

135KB
MD5

38352c6cfc641717762f3765ea87990e
SHA1

0c35eac6517995405d51aa2d1954d0f93ddea1d7
SHA256

e2e6ef78b59eb99f048102045559ac7c91cad0d1ea21e4bde7e5dc93b17c82ea
SHA512

12457a7e229442fb2bdd5137490847130dcb9ec665b13e7417eff184f96bcdcdb10b734d6232a7be7d0b8564ea02a2afb4f40ead243928e23e56b5b39fbc7016
SSDEEP

3072:lEjJAxKmXKiYae2vpzVuP7e/RF3jbkOw5PNSFB7b4:26KmhYx2xwPq/RpjgOwzSz4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38352c6cfc641717762f3765ea87990e_JaffaCakes118

Files

38352c6cfc641717762f3765ea87990e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e89e8cc4bf5139dfb4099d37f3eade5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHLoadInProc
DragQueryFileW
ShellAboutA
ShellHookProc

kernel32

DeleteFileW
CreateMutexW
WriteTapemark
CreateFileW

comctl32

ImageList_LoadImageW
ImageList_Write
CreateStatusWindowW
ImageList_DrawEx

ntdll

LdrLockLoaderLock
LdrSetDllManifestProber
LdrShutdownThread
NtAlertThread
NtClearEvent

Sections

.text
Size: 60KB - Virtual size: 91KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE