90b77dead3af27293eaaeddb2072d7e9_JaffaCakes118 | Triage

Sharing

General

Target

90b77dead3af27293eaaeddb2072d7e9_JaffaCakes118
Size

120KB
MD5

90b77dead3af27293eaaeddb2072d7e9
SHA1

0542bb6a246860e8a88b7c2ffd9e8b820c01ead8
SHA256

43988468edaaac30a0764083a16fb26a4da573649901532387859e6efbc3726b
SHA512

63d2dfbbf104cd2f3f431c282c731ebf7634b3f0714af00ffc4c7fddcd672e04d33c112873aa3f58b67b5a583c1fdae89c1afb3b06b8b61647600d7adc1c491f
SSDEEP

3072:gF0FukCABA790k9Hc3/nl6LAHkzI1UsgEA6II9EId:i0EEW7+k961A4J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90b77dead3af27293eaaeddb2072d7e9_JaffaCakes118

Files

90b77dead3af27293eaaeddb2072d7e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9edca9a99fe1f63f6aa4b7f880c3eec8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

comctl32

ImageList_Create

gdi32

SetBkMode

ole32

CoTaskMemFree

shell32

SHGetFileInfoW

user32

GetDC

Sections

.MPRESS1
Size: 40KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1
.png
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/MANIFEST/1
.xml