98f6a4b98ce531a17ba548acdfdc2154_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98f6a4b98ce531a17ba548acdfdc2154_JaffaCakes118
Size

30KB
MD5

98f6a4b98ce531a17ba548acdfdc2154
SHA1

da08bde7ee94ac96737932b73e9170683f1d70f1
SHA256

4a09da99be17967f768ea2557fb5a0c5ff83006d7bea356ebc1a062c9e18a041
SHA512

f2a5630122ca3bb16e136f89ea703cc6b51a2a68bee62645cfc8fcb22143587732f79f1f4520fdad0aea6687af23e0ca9c435cc8bd79c87f240b426b5bdcef79
SSDEEP

768:iOxziYcpl8/8e5EmwWa7D638FTOOOOOOOOOOOOOOOUw9OOOOOOOOAXS:iyzi34/80EmwWQKIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98f6a4b98ce531a17ba548acdfdc2154_JaffaCakes118

Files

98f6a4b98ce531a17ba548acdfdc2154_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60858c22ebb3b03e9278c6ade19598c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

ShellExecuteA

advapi32

RegCloseKey

comctl32

ord17

ole32

OleInitialize

Sections

.MPRESS1
Size: 17KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/MANIFEST/1
.xml