JaffaCakes118_2f9dcfeb1d09751cd1bafb19d06af006 | Triage

Sharing

General

Target

JaffaCakes118_2f9dcfeb1d09751cd1bafb19d06af006
Size

158KB
MD5

2f9dcfeb1d09751cd1bafb19d06af006
SHA1

a679811876f5eb769adb5fdd16c9b720feb5501d
SHA256

64b0f66a09abcc79957de90cba95e3954dce9d0f9ba0503283a7b83bb992b879
SHA512

f5b802326559bd26340425c885e8377453b41208b4286d37946e9b1729f6627320eabb6d647ab6df584e75acd86d0add3826e5c9b0590f88d564bcb47d46d378
SSDEEP

3072:y1FxSngp/Zew82am8LTHdRKNSAAE0fivqFrkxrmWirHZC89n6vaL:ID/Z71ATKvOkFmzHfia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2f9dcfeb1d09751cd1bafb19d06af006

Files

JaffaCakes118_2f9dcfeb1d09751cd1bafb19d06af006
.exe windows:4 windows x86 arch:x86

b4540de292938d29f3cfb9f4179eb462

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FileTimeToSystemTime
SetEnvironmentVariableW
GetNextVDMCommand
FreeLibrary
FileTimeToLocalFileTime
SetThreadPriority
GetShortPathNameW
GetLocalTime
LocalFileTimeToFileTime
SetErrorMode
LoadResource
EnumResourceNamesW
FindFirstFileW
FindNextFileW
FindClose
RegisterWaitForSingleObject
CompareStringA
FindResourceW
GetStringTypeW
SetCurrentDirectoryW
SystemTimeToFileTime
SearchPathW

user32

ReleaseCapture
ValidateRect
GetWindowInfo
ValidateRgn
GetCapture
InvalidateRgn
SetCapture
ExcludeUpdateRgn
GetUpdateRgn

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ