f8789c8e4250b3a8916224e7e7a45b28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8789c8e4250b3a8916224e7e7a45b28_JaffaCakes118
Size

81KB
MD5

f8789c8e4250b3a8916224e7e7a45b28
SHA1

8b6403d2725b528804691a680589a7914a6291c8
SHA256

2bc8a309a1b972b3b5ea47ff75a947e1df7533e65142fda75719a6db4f164e98
SHA512

16b5f9c60d8d7e5ca9eae81c9cba44bac0b0e380fd84413564e08ca4fd6f0a8469d83e4191cd05d6deb09fc7d87fb8685cff3edc7aa8b58853a9072b968ab0e5
SSDEEP

1536:HzYw2dB6hMTTDAMKrPR5d5LvZLxq44i209QYKDZFmJq2MTk31XjcCcJMA:H0nboKHyZZldB4iBaZFmqoYJJMA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8789c8e4250b3a8916224e7e7a45b28_JaffaCakes118

Files

f8789c8e4250b3a8916224e7e7a45b28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1c984d79dfd7a66a305255e434ac247

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ModifyMenuW
LoadMenuW
MapDialogRect
IsChild
GetWindow
IsZoomed

comctl32

ImageList_Destroy
ImageList_GetIcon
ImageList_Read
ImageList_SetImageCount
DrawInsert
FlatSB_SetScrollRange

urlmon

GetClassURL
CoInternetGetSession
IsJITInProgress
CreateAsyncBindCtx
InstallFlash
GetClassURL

comdlg32

WantArrows
ChooseColorW
GetOpenFileNameW
LoadAlterBitmap
CommDlgExtendedError

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE