JaffaCakes118_8c54df1ad4b085588cb3c157ee4b8d0a | Triage

Sharing

General

Target

JaffaCakes118_8c54df1ad4b085588cb3c157ee4b8d0a
Size

286KB
MD5

8c54df1ad4b085588cb3c157ee4b8d0a
SHA1

4f3632c5ebf62ec406738ca5be7f1f292e8f56cc
SHA256

801317971fb2ef1cb7a85d0a320a211b4bd961a0ab0df28ed44869362cb77cc9
SHA512

9a24caeba6b522da392c2b9ad851e01b4fc56fe77cc9dac9710540ab5818bcd5253b52c1ec11d2dd2789921238c7496a5e030e2df0815c437f01d21b0a3afcc2
SSDEEP

6144:myfbawhSGU66LMeEesxrAx828KDJj+XY3av/5Idy2eA:myfbawhAwCcq836+XY39dy2eA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8c54df1ad4b085588cb3c157ee4b8d0a

Files

JaffaCakes118_8c54df1ad4b085588cb3c157ee4b8d0a
.exe windows:4 windows x86 arch:x86

99654192e6d8e8bcda267c88d100039c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetOEMCP
LCMapStringW
GetAtomNameA
GetEnvironmentStrings
SetFilePointer
GetThreadLocale
IsBadReadPtr
UnhandledExceptionFilter
ReadFile
VirtualProtect
FindFirstFileA
EnumResourceNamesA
GetFullPathNameA
GetFileAttributesA
FlushFileBuffers
CreateFileA
IsBadCodePtr
WideCharToMultiByte
WriteFile
FreeLibrary
LoadLibraryExW
GetStringTypeA
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetDiskFreeSpaceA
LCMapStringA
MulDiv

rpcrt4

RpcStringFreeA

shlwapi

DllGetVersion
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW

Sections

.text
Size: 141KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ