4dba068267dbd1ab2a5db0b7c1f0daf0_JaffaCakes118 | Triage

Sharing

General

Target

4dba068267dbd1ab2a5db0b7c1f0daf0_JaffaCakes118
Size

46KB
MD5

4dba068267dbd1ab2a5db0b7c1f0daf0
SHA1

d1cfa220dd31c0824c2f6167f005df6a79500ade
SHA256

f495262ee35b0ef97342d8f27eda96aa00cbff86be4f8c97b9604174e2d92938
SHA512

8b7a16789bf20310f1ff6201a2201fa3370eb6f392f6a4bbb7c75ba0ebd4600bdda583e9957fbf8f1cbc6234cd6a459c538da30722084d10e0ad6595b912ae58
SSDEEP

768:2DVGRR0EpKHhh3UNKMNkOT7DkwtyvY//nL2i5:a4erH3Pqjy69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dba068267dbd1ab2a5db0b7c1f0daf0_JaffaCakes118

Files

4dba068267dbd1ab2a5db0b7c1f0daf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa105b1f387888ff4a1273995ba0de12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

SHGetFileInfoA

advapi32

RegCloseKey

comctl32

ord17

ole32

OleInitialize

Sections

.MPRESS1
Size: 18KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/MANIFEST/1
.xml