e9214f5d6465744f0e863e0a26fc8459_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9214f5d6465744f0e863e0a26fc8459_JaffaCakes118
Size

118KB
MD5

e9214f5d6465744f0e863e0a26fc8459
SHA1

0fd388de8c6e2674b67874ee29eefcc5b0b7bd52
SHA256

39148a80173a76a3987efab74126d748f384bc6a8b726f105ba180e7d8dfee82
SHA512

e136b959a27af93b7f2954e4060014197bdaf1dc456d3abbe761fd42af3e9aad39b160346da40673d9e06de972791bd82ebc749c52e6371153742764d12d10b8
SSDEEP

1536:10cLGyQ1uGXBp08j92uNF3iKpX6vl2OQS0g8fWDCG+mUUJ4QmMUw8NUX2VoleLOw:2cLGymuaLniKZsVQS0gUWDt4Q0wvjQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9214f5d6465744f0e863e0a26fc8459_JaffaCakes118

Files

e9214f5d6465744f0e863e0a26fc8459_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fa153bff275b3cf0420a72cec92478e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

kernel32

ExitProcess
GetCommandLineA

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE