JaffaCakes118_19776191a8887df258c063e760128d3d | Triage

Sharing

General

Target

JaffaCakes118_19776191a8887df258c063e760128d3d
Size

273KB
MD5

19776191a8887df258c063e760128d3d
SHA1

601654db3ef15cdc76231ca3b48d00678dfd5273
SHA256

ed2cd22702c443e1d8991d5a8db0046b0ea140948f9397cce8c8fb8c71da0a26
SHA512

822bb833c158193236b7fb41c20404e6b935697bf949444b87e70b9539146b6de7d30868e46424039e4b3c9f00b3c055b26d568750897a6a54ce1b9840b293dd
SSDEEP

6144:Pk6iXTrNIe176t+iWfNNyzMdM8fVkPuV:0T11MWVNyzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_19776191a8887df258c063e760128d3d

Files

JaffaCakes118_19776191a8887df258c063e760128d3d
.exe windows:4 windows x86 arch:x86

f7f8abdabc96f1d900b658e52798f198

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
WriteConsoleA
GetAtomNameA
SetFilePointer
GetDateFormatA
GetConsoleOutputCP
TlsAlloc
GetACP
TlsGetValue
GetLocaleInfoA
GetCPInfo
EnumResourceTypesA
HeapSize
HeapReAlloc
IsValidCodePage
IsProcessorFeaturePresent
TlsSetValue
VirtualAlloc
SetStdHandle
RtlUnwind
GetTimeFormatA
MultiByteToWideChar
RaiseException

rpcrt4

RpcStringFreeA

shell32

SHDefExtractIconA
SHGetFileInfoA
DragAcceptFiles
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ