f9961644f774dd9b2533bb4fcd356ce7_JaffaCakes118 | Triage

Sharing

General

Target

f9961644f774dd9b2533bb4fcd356ce7_JaffaCakes118
Size

168KB
MD5

f9961644f774dd9b2533bb4fcd356ce7
SHA1

2091a1d49fa2e570e78d4dcb1680d05348ba9d3d
SHA256

55bbda7ef8ccf36366b2027dd53d3ab25d97b10845fe601f23bf6fcdf50de30e
SHA512

d7bdaa2feff2b2602dd0801b5545962edcbcab60c329b00dec00d7118c6d0b21a4fe4dcc3398b6c6db7e7ac6e3a72e6645b99f7b0e7edb43ab405e93cdfd20d7
SSDEEP

3072:cQskWUn3Ozry+KoRXckWQlHMoQEn9yzXZzZiHRUhog2T+wtYouP3oh:cxpUn393ouQlgVzAH2+TuouP3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9961644f774dd9b2533bb4fcd356ce7_JaffaCakes118

Files

f9961644f774dd9b2533bb4fcd356ce7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aabfb4389469c2755d74a290a1fe5958

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetFileAttributesA
WideCharToMultiByte
GetAtomNameA
LoadLibraryExW
IsBadReadPtr
GetFullPathNameA
LCMapStringA
GetEnvironmentStrings
GetCPInfo
FreeLibrary
ReadFile
LCMapStringW
EnumResourceNamesA
GetEnvironmentStringsW
WriteFile
GetDiskFreeSpaceA
VirtualProtect
IsBadCodePtr
FreeEnvironmentStringsA
GetThreadLocale
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
FlushFileBuffers
GetOEMCP
GetStringTypeA
SetStdHandle
CreateFileA
SetFilePointer
UnhandledExceptionFilter
MulDiv

rpcrt4

RpcStringFreeA

shlwapi

DllGetVersion
PathIsFileSpecA
PathIsContentTypeA
PathAppendA
SHCreateStreamOnFileEx
PathCreateFromUrlW

Sections

.text
Size: 83KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ