JaffaCakes118_7a4656b19dd43c727f23f45e92e2201f | Triage

Sharing

General

Target

JaffaCakes118_7a4656b19dd43c727f23f45e92e2201f
Size

110KB
MD5

7a4656b19dd43c727f23f45e92e2201f
SHA1

178938f4384b65d4eac05f98e9831b3f67661f66
SHA256

f74015c51b7d8d18a0b1b28b836dfc23713db08807f356c17225ca13a92c63a3
SHA512

45b60e54ce8b559a0332af74f4466f62c325d09d68e5ff0c51ba11ab915fed398e5a2b86bf82a7f9000eb063df10fe054ae46db15f9b55bff8b0085b57bd4755
SSDEEP

3072:Bg6FP6sFCR55hdnv/9UK3F3vbeeNrU5ztEKLYQPpBK:BtF1FCVLnv/DBva0rQE6HP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7a4656b19dd43c727f23f45e92e2201f

Files

JaffaCakes118_7a4656b19dd43c727f23f45e92e2201f
.exe windows:4 windows x86 arch:x86

984f7c58a424c75b3087f0b9cc7aae77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
Sleep
OpenMutexA
FileTimeToLocalFileTime
GetModuleFileNameA
SetLastError
HeapCreate
lstrlenA
GetModuleHandleA
DeleteFileA
GetStdHandle
lstrcmpiW
CreateNamedPipeW
CreateMailslotW
lstrcmpiW
WaitForMultipleObjects
GetVolumePathNameW
GetLogicalDriveStringsW
IsValidLocale
lstrcmpiW
GetProcessHeap
lstrcmpiW
lstrcmpiW

scecli

InitializeChangeNotify
DeltaNotify
SceOpenPolicy
SceSysPrep

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ