884a7b6a3bc3a6624d29c6fd04f4b250_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

884a7b6a3bc3a6624d29c6fd04f4b250_JaffaCakes118
Size

37KB
MD5

884a7b6a3bc3a6624d29c6fd04f4b250
SHA1

a9fb1430a4f9d95bbc3ff96f72ea4164b2be6aeb
SHA256

50f776bd1f80834484424ec70f642bffcdb3625eb4b4041957832cc841fda411
SHA512

4e94c85c10d353b1ec40b9165e1e249d1922e923e396328a33240171a47a56e910ed4989e66f3c650f22d5e01fe9cdcd0d524a83a3a715673425ecb6b8ffb8d2
SSDEEP

768:g5E1Ukysu7MG0tvaBkrhbivtr7Dlg62iZIAm6kRRj+B6JRnD:gslGEvKkrhbivjg6LWApBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
884a7b6a3bc3a6624d29c6fd04f4b250_JaffaCakes118

Files

884a7b6a3bc3a6624d29c6fd04f4b250_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60858c22ebb3b03e9278c6ade19598c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

ShellExecuteA

advapi32

RegCloseKey

comctl32

ord17

ole32

OleInitialize

Sections

.MPRESS1
Size: 17KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/ICON/7.ico
.rsrc/MANIFEST/1
.xml