JaffaCakes118_439fa8e7368ee82bacc8e9dfb93153ce | Triage

Sharing

General

Target

JaffaCakes118_439fa8e7368ee82bacc8e9dfb93153ce
Size

187KB
MD5

439fa8e7368ee82bacc8e9dfb93153ce
SHA1

bf95486af9518ae3c207f1bcb7c2be2c02ffe54f
SHA256

113e4bc5259272347a7aa39e0a172317f01a14814c3359cbeddc144e7f16a236
SHA512

504aac164a6127a3a0df92f67f2247bcf3bf6f3f985e6e53061a93de8131e356cd091f29a145d101760623903750c39c3e44569b0b734c8a9353b037ce9c89d5
SSDEEP

3072:EiEwWW0AYX9dbOKLCNh072GeTm9sZuKp2nPSqgPXWL+T5hC:EiE97diKeCa52Cth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_439fa8e7368ee82bacc8e9dfb93153ce

Files

JaffaCakes118_439fa8e7368ee82bacc8e9dfb93153ce
.exe windows:4 windows x86 arch:x86

65c3c082debf764a6ba6036ae439b013

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetSystemTimeAsFileTime
IsValidCodePage
SetStdHandle
GetAtomNameA
InitializeCriticalSection
FreeLibrary
WriteFile
LoadLibraryA
GetLocaleInfoA
LeaveCriticalSection
GetOEMCP
VirtualAlloc
GetDateFormatA
RtlUnwind
HeapSize
WriteConsoleA
EnumResourceNamesA
SetUnhandledExceptionFilter
TerminateProcess
GetStringTypeW
UnhandledExceptionFilter
GetTimeFormatA
GetConsoleOutputCP
GetACP
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
SetFilePointer
GetCPInfo
HeapReAlloc
IsDebuggerPresent
RaiseException

rpcrt4

RpcStringFreeA

shlwapi

SHCreateStreamOnFileW
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW

Sections

.text
Size: 95KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ