057b1b8e9867c4da736ddba98df02037_JaffaCakes118 | Triage

Sharing

General

Target

057b1b8e9867c4da736ddba98df02037_JaffaCakes118
Size

69KB
MD5

057b1b8e9867c4da736ddba98df02037
SHA1

2886f315c99421d6772c467b8e0d8cfc3b83ab50
SHA256

f5b45c5a6efbd1bd81c438f55c06f62b2525bbaf8cf5008b74252674dc700968
SHA512

d08bec1249e0c0d54a209ad4159f2d38bd54d27048b79752dd461488eac50af2a4da57234e17b1642bccafc838e2d4a619321b76088ebad27a3c6d21f2ef75ac
SSDEEP

1536:VP6O+2a4lxhbDcngGbqXZm/2R5wr/G/2aA76Ix:VlbTbDcngBXZI2vwru/gFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057b1b8e9867c4da736ddba98df02037_JaffaCakes118

Files

057b1b8e9867c4da736ddba98df02037_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5346f5541aebc9a8cbab678c10be38ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassWord
DestroyCursor
GetMenuState
CharToOemW
CreateIconIndirect
FindWindowW
GetUpdateRgn

kernel32

ExitProcess
CreateThread
FatalExit

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

Sections

.text
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE