3dc971bf6bba845d8e5d43bdef2786c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc971bf6bba845d8e5d43bdef2786c4_JaffaCakes118
Size

28KB
MD5

3dc971bf6bba845d8e5d43bdef2786c4
SHA1

9abe28c78cc34e10f9fb28487168587445dd2a3a
SHA256

48fceea903f49543964a8592b7ebdbb7a028f66721ac3bde5a98c29d3b9f2945
SHA512

c455764860cf8af278764e651484d67d674eafd261caa82a88eee0a82eca760bc3b504e7ae439d440bbc1e3183b09f75f5d5f8a6fab37f498bd2209578436ec3
SSDEEP

384:vmmHgbczt9XNPChCURFwSmTcqzve2rKAuhRPQfEqO7vvxlLPafQPeEGmJiiiiiiN:RicfXNPgbRF7mg8rKAuLPq87DfGmJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc971bf6bba845d8e5d43bdef2786c4_JaffaCakes118

Files

3dc971bf6bba845d8e5d43bdef2786c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa105b1f387888ff4a1273995ba0de12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

SHGetFileInfoA

advapi32

RegCloseKey

comctl32

ord17

ole32

OleInitialize

Sections

.MPRESS1
Size: 18KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/MANIFEST/1
.xml