JaffaCakes118_8be588748c8a2d4f4b0583e9fa587189 | Triage

Sharing

General

Target

JaffaCakes118_8be588748c8a2d4f4b0583e9fa587189
Size

116KB
MD5

8be588748c8a2d4f4b0583e9fa587189
SHA1

6a5daccba5afd482e0cbce2cbfecb3aa8cc724bc
SHA256

78a0823c1a6d51f861e27a5a746ed7aecc410db09c7c3d34050750fb77d49a3f
SHA512

4a979326226c2c237c88eadabd5525c8cca89e05911c302b8de9dca4415ba1571132f3ee2047c2a7f173c0eea2f481ba07afc819b408d47df46adeb91e90708e
SSDEEP

3072:d+DnIwGxxZgW95RlCHjv9KVLvBrU/H8/QnlT:uIPZgW769gbBs8IlT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8be588748c8a2d4f4b0583e9fa587189

Files

JaffaCakes118_8be588748c8a2d4f4b0583e9fa587189
.exe windows:4 windows x86 arch:x86

b897ba7815207aaab14cb221c6713e9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
lstrcatW
lstrcmpiA
GetPrivateProfileStringA
GetStdHandle
lstrcmpiA
GetDriveTypeA
TlsFree
HeapCreate
GetExitCodeProcess
CreateNamedPipeA
CreateWaitableTimerW
lstrcmpiA
GetModuleHandleA
FileTimeToLocalFileTime
SetLastError
lstrcmpiA
GetLogicalDrives
GetBinaryTypeA
GetTickCount
lstrcmpiA
EndUpdateResourceA
IsValidCodePage

netshell

HrGetIconFromMediaType
HrLaunchConnectionEx
NcFreeNetconProperties
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ