4cf36f6a751e4289b476a52aba18471a_JaffaCakes118 | Triage

Sharing

General

Target

4cf36f6a751e4289b476a52aba18471a_JaffaCakes118
Size

105KB
MD5

4cf36f6a751e4289b476a52aba18471a
SHA1

664fc33647a8ea0409b63c42d9f90809a75750eb
SHA256

fa073ba3144572b6b24949cb4ac0ebe1da4b5ce1a85b420ed22571b4526f9474
SHA512

0a72839e04d4555765f4564b7c284abf5d0bd4d5161bbe761e08326913a3a2f08b3d827953b4968eef98e68cbaafe8f49b96495d3287bca22caa190c06172c20
SSDEEP

3072:Ynpjrh/Nv966bRbJa+FW7rJNLUuOxkupOFpQuSs:YpjrFNv96i1UpJNw5xkupOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cf36f6a751e4289b476a52aba18471a_JaffaCakes118

Files

4cf36f6a751e4289b476a52aba18471a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eda76bef952f150c841bc354ef860806

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

setupapi

SetupFreeSourceListW

urlmon

CoInternetIsFeatureZoneElevationEnabled

kernel32

FillConsoleOutputCharacterA
FlushConsoleInputBuffer
GetLastError
FlsFree
GetNumberOfConsoleInputEvents

ole32

CoRevokeInitializeSpy

msi

ord30

gdi32

RoundRect

user32

MessageBoxA
EnumDisplaySettingsW
SetProcessDefaultLayout
GetMenuItemInfoA

Sections

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ