03440fb5f1986c8970569db85911f23a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03440fb5f1986c8970569db85911f23a_JaffaCakes118
Size

106KB
MD5

03440fb5f1986c8970569db85911f23a
SHA1

c51886cd31837dffd7fda507dd5e36a803a3247d
SHA256

7518434f14ba5abb5349e349464e2ca904bc5b3cebcc5cc4257049aeef5dea41
SHA512

e0666ab13dc01b1bd800d06aba905228aea224ea75e38ba0f0c56c38e2c93d174629bf54b4418956c76c4967561f0bd9da0404b1d175abea67d83d0565b2d054
SSDEEP

3072:XpRmbMN6hNA/YEtn0Y+EB8lq2on2KRax37VmlFtW:Xpc9hNA3l+lQNhaBaFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03440fb5f1986c8970569db85911f23a_JaffaCakes118

Files

03440fb5f1986c8970569db85911f23a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e6a087972fef54f9fa6a0ffc7abb4ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DAD_DragLeave
StrStrIA
DuplicateIcon

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE