39b12aa845fe004fe519dce81c2c0f19_JaffaCakes118 | Triage

Sharing

General

Target

39b12aa845fe004fe519dce81c2c0f19_JaffaCakes118
Size

65KB
MD5

39b12aa845fe004fe519dce81c2c0f19
SHA1

d8110ff0a827d963c19c3d67ee11393ef6f9ee17
SHA256

80cf41ee773b845a74940e3e9fcb0d4fbf5cdd47b3dce49acb591b1c13551ff7
SHA512

6bd14b788c31b730657d547aecd4a885ceb298e8b441164e697005580ec29035a580574bcbae0b55afaa0417cb208b24d2dacbe59dc02eabec6fdf76d5ce6c5a
SSDEEP

1536:M1q5rAFj7qatUz34qW+FhbOTTTTTTTTTtmp6S0Z4TQju:M1AAtXUMqWSbOTTTTTTTTThSa4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39b12aa845fe004fe519dce81c2c0f19_JaffaCakes118

Files

39b12aa845fe004fe519dce81c2c0f19_JaffaCakes118
.exe windows:5 windows x86 arch:x86

39dfe3c950ccc603adf48469ef7b3c25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
InitializeCriticalSection
GetStringTypeW
DeleteFileA
GetConsoleAliasA
GetProcessHeap
CreateSemaphoreW
CreatePipe
WriteConsoleW
LoadLibraryA
VirtualAlloc
GetStringTypeA
SetCurrentDirectoryA
GetACP
DeleteFileA
SetVolumeLabelW
GetShortPathNameW
FatalExit
SetEnvironmentVariableA
GetModuleHandleW
CreateFileMappingW
DeleteFileA
DeviceIoControl

mshtml

ShowHTMLDialog
ShowModalDialog
DllEnumClassObjects
ShowModelessHTMLDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ