4031578481bdcd77731a690db5df266d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4031578481bdcd77731a690db5df266d_JaffaCakes118
Size

132KB
MD5

4031578481bdcd77731a690db5df266d
SHA1

4ff038c20a5ec34191cc6fa16fc975ebddf661ef
SHA256

dfe04cee57518923a9e595449c1ef4c09382dc8d362213d1c20e807a4c185728
SHA512

65496fe776cfc31083d07313a3c1e433d365815d876af5f23ec797932485b37534af012515ee0e44d217da4cf13a645d8cfe177cc918db7fd05fa25b942f8236
SSDEEP

3072:Uny0/uDAFLupjhaJP2LVH5x6LmkoOmd40nXEj3qR:UnyIukIpjh7VZkOOw40nUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4031578481bdcd77731a690db5df266d_JaffaCakes118

Files

4031578481bdcd77731a690db5df266d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

344b3b020bb26c9c207a0f74e5e4f415

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetEnvironmentStringsW
CommConfigDialogA
WaitForSingleObject
IsDBCSLeadByte
_lopen
SuspendThread
SetSystemTimeAdjustment
CreateFileMappingA
SetComputerNameExW
CopyFileExA
GetWindowsDirectoryA
GetLogicalDrives
CreateHardLinkW
WriteConsoleInputA
RequestWakeupLatency
IsBadStringPtrA
_lclose
SetThreadIdealProcessor
GetCPInfoExA
SetVolumeMountPointW
IsBadStringPtrW
GetCommandLineA
ResumeThread
SetConsoleTitleW
DefineDosDeviceW
OpenMutexW
GetConsoleNlsMode

Sections

.data
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ