JaffaCakes118_ab9d8676d6267c466fbc98498442392d | Triage

Sharing

General

Target

JaffaCakes118_ab9d8676d6267c466fbc98498442392d
Size

187KB
MD5

ab9d8676d6267c466fbc98498442392d
SHA1

2a0ccb91b7b87de5fcaf32c5bdb5cb3e269a45a6
SHA256

1df1e2601c47d80034ab65caf1b118627ea0b89439f83d55f7a1425b04c9657a
SHA512

23bccac7453ac366f3d7d325d8604c3c5b1eb9ac4860e07faf096f79564328634e9d10ca19dd15a9d55b293a7a41bf738e1d6aad6adfbe948eec6feff10c6c11
SSDEEP

3072:Ei5wWW0AYX9dbOKLCNh072GeTm9sZuKp2nPSqgPXWL+T5hC:Ei597diKeCa52Cth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_ab9d8676d6267c466fbc98498442392d

Files

JaffaCakes118_ab9d8676d6267c466fbc98498442392d
.exe windows:4 windows x86 arch:x86

65c3c082debf764a6ba6036ae439b013

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetSystemTimeAsFileTime
IsValidCodePage
SetStdHandle
GetAtomNameA
InitializeCriticalSection
FreeLibrary
WriteFile
LoadLibraryA
GetLocaleInfoA
LeaveCriticalSection
GetOEMCP
VirtualAlloc
GetDateFormatA
RtlUnwind
HeapSize
WriteConsoleA
EnumResourceNamesA
SetUnhandledExceptionFilter
TerminateProcess
GetStringTypeW
UnhandledExceptionFilter
GetTimeFormatA
GetConsoleOutputCP
GetACP
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
SetFilePointer
GetCPInfo
HeapReAlloc
IsDebuggerPresent
RaiseException

rpcrt4

RpcStringFreeA

shlwapi

SHCreateStreamOnFileW
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW

Sections

.text
Size: 95KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ