02236fe5e9c9d454370168bd33bb4570_JaffaCakes118 | Triage

Sharing

General

Target

02236fe5e9c9d454370168bd33bb4570_JaffaCakes118
Size

26KB
MD5

02236fe5e9c9d454370168bd33bb4570
SHA1

0445250093d051822ec26f8a3c78d5a005a93782
SHA256

ccaeacce3ad7c836c660bfbd4c30a5f689a10a0fd8a00d41afefc3d234deb339
SHA512

3ff7b8d2dddcd3eab8272998539b84359f4208dd29b4ac6e955052ac318b5d17effda5f083a257738f3295f66eca819f7d28ac4df86c10505c2ff5ae48da9b85
SSDEEP

768:d+OM1jzpte7sXPaX+gpjdjY4iq/aiwKLB9ccssw:4VM+PaOgp64bS2B9cIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02236fe5e9c9d454370168bd33bb4570_JaffaCakes118

Files

02236fe5e9c9d454370168bd33bb4570_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fefebdc77e9ff5c9dac38b5078d0f09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
ReadConsoleW

user32

EnumWindowStationsA
LoadMenuIndirectA

gdi32

GetTextExtentExPointA

Sections

.tls
Size: - Virtual size: 226KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 279B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ