86694263f9141c09264ed06fc607e514_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86694263f9141c09264ed06fc607e514_JaffaCakes118
Size

23KB
MD5

86694263f9141c09264ed06fc607e514
SHA1

6d58b2dd4a040fcf06cbbca6875e9adb43cf02d8
SHA256

f3746d1a407438cdc5c44d201cf17edc6aaa5a2262f127e8957e216b7f9bd74f
SHA512

5243801f64f73dc945adc7c882a83e24506bf2e0677f6dd45840054ac980b4fd853f3703975b423e4f0d6886a6958dc1a7650fcc296a28c4235d66354d723a5f
SSDEEP

384:UBs4jq8Mm+Zh7mifDdjAyAgSOjWoV6sazBcOCWKHtqhIlw1/Ep+DTlOC7vvxlLeX:Es4jq8afjdAynBlbBdHEI2/aYlT7DeAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86694263f9141c09264ed06fc607e514_JaffaCakes118

Files

86694263f9141c09264ed06fc607e514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21001bcd9eb8937e7de7822e8b7ed58e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

ShellExecuteA

advapi32

RegCloseKey

comctl32

ord17

ole32

CoTaskMemFree

version

VerQueryValueA

Sections

.MPRESS1
Size: 17KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/MANIFEST/1
.xml