JaffaCakes118_1d75597340a49b719b6053b577ace669 | Triage

Sharing

General

Target

JaffaCakes118_1d75597340a49b719b6053b577ace669
Size

185KB
MD5

1d75597340a49b719b6053b577ace669
SHA1

06a5a5e027a009ac083d685cee808ebc73c45502
SHA256

1007208bf69be0bed05fa22242aa06966693d33793a824e7c73323c10f1a3fb6
SHA512

1f4655f4a0e083f2fe21a5f6c64f830fad04de0d51594ba18e3f98ea134357fc529eea83358d34eb83208fea485afb8de3f6a848f0b0e72c5669f21de7362570
SSDEEP

3072:t8+rfhgzISx1YZFwKm2BpxrHlsAY4hTj7KDY2ASxT7upC5w1cbw1zHZoOC3:tPNgzIEe+mLlsEh2OSxu05w1cshZoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1d75597340a49b719b6053b577ace669

Files

JaffaCakes118_1d75597340a49b719b6053b577ace669
.exe windows:4 windows x86 arch:x86

6337ecf50e101b465cda90aebfc229b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
AddAtomW
GetOEMCP
SetFilePointer
SetStdHandle
CreateFileA
FlushFileBuffers
WideCharToMultiByte
WriteFile
GetFileAttributesA
ReadFile
FindFirstFileA
GetDiskFreeSpaceA
GetStringTypeA
EnumResourceNamesW
FreeEnvironmentStringsW
UnhandledExceptionFilter
IsBadReadPtr
LCMapStringW
FreeEnvironmentStringsA
GetStringTypeExW
GetThreadLocale
GetFullPathNameA
GetStringTypeW
LCMapStringA
VirtualProtect
GetEnvironmentStringsW
IsBadCodePtr
SetUnhandledExceptionFilter
GetCPInfo
MulDiv

shlwapi

SHGetInverseCMAP
PathAppendA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathIsContentTypeA
PathCreateFromUrlW

rpcrt4

RpcStringFreeA

Sections

.text
Size: 97KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ