dad47b223b753394cba84b8ea5d45ceb_JaffaCakes118 | Triage

Sharing

General

Target

dad47b223b753394cba84b8ea5d45ceb_JaffaCakes118
Size

120KB
MD5

dad47b223b753394cba84b8ea5d45ceb
SHA1

2b0f274ce12026fa7eae0d94237a2e661dfd2284
SHA256

d4924ae1d62a6b63a8c9663c0a9d8687c163e43a90317d83e3e8a23a3ad9c8a3
SHA512

25091a967467f4a2f01f44d66c27bfa00be43609509d8e94a0893dd6b67c8344f557dab551c8b7a838d8ed1aba05129a7c933b97d3cac62cf888d2fa1dea8210
SSDEEP

3072:VB+9GXTU1rVzQKcJJexKHLS9sm5MIV/q:xXA1rqfexKLWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad47b223b753394cba84b8ea5d45ceb_JaffaCakes118

Files

dad47b223b753394cba84b8ea5d45ceb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bc45c63818510ecb065986b799684422

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
WaitForMultipleObjects
FindFirstVolumeA
GetFileAttributesW
GetFullPathNameA
OpenMutexW
GetModuleHandleW
GetStringTypeA
CloseHandle
CloseHandle
CloseHandle
GetVolumePathNameA
GetDiskFreeSpaceW
HeapCreate
GetModuleHandleA
GetConsoleMode
GetFullPathNameA
GetCurrentDirectoryA
lstrcmpW
FindNextVolumeA
ReadConsoleA
CreateSemaphoreA
ReleaseSemaphore

certmgr

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.pack
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE