081585a433c1be595cec686264ae0f43_JaffaCakes118 | Triage

Sharing

General

Target

081585a433c1be595cec686264ae0f43_JaffaCakes118
Size

190KB
MD5

081585a433c1be595cec686264ae0f43
SHA1

f9ab1d8f7a2cfa72f764952de718b7fee4d16256
SHA256

4e1b6e46941c1aaa4c1d593eb68ced9974dadd02148cabe5fe20a7ad0ed13318
SHA512

3ca14809d1d06a01e5f82c8c0de4f4f2f28bc94ea94a02bb187357d3b735bffc66026e006cbf7635b64fc6c8f0369f285ecf37edb422d755f0e2c1d3752aa4a4
SSDEEP

3072:ngcfWGSPtoq5Fu2Lt9vBFX6iZz7+zNZiw0i/MLMyrwfYoNdgRoyRiB7Xe6AU/w/X:xfWGSamRFXba3N52nwfYw22zfAUGUvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081585a433c1be595cec686264ae0f43_JaffaCakes118

Files

081585a433c1be595cec686264ae0f43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c772d26c74752b56dfd0cafb7706a4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
StrRChrIA
StrStrIA

wsock32

WSACleanup
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SaveDC
TextOutW
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SetDIBColorTable

Sections

.text
Size: 38KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ