0882b454f80d9681efc876b97ebdf4db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0882b454f80d9681efc876b97ebdf4db_JaffaCakes118
Size

29KB
MD5

0882b454f80d9681efc876b97ebdf4db
SHA1

a0200a162b446bd9fc5579b84bc57c18a051aae6
SHA256

c81b232cd9622d74a3eb142c7fa4cea7a901fa6f6f61b559c1c2206530009746
SHA512

a720c786d064f76a9098a6ae14357098ebaa68cbccf4338ba961b141c67177e31b57235087764d98593170b98dab1e004c1f3d38e2cc37668d62b28888ae4d26
SSDEEP

384:XwcjFTj6rPjj3ZGWazTqmbb9UKX0zZqC8mQecPcI7nbCxsUzT7i:Xwc9GDJGWazTqmuKX00C8McPc0nbCuUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0882b454f80d9681efc876b97ebdf4db_JaffaCakes118

Files

0882b454f80d9681efc876b97ebdf4db_JaffaCakes118
.exe windows:1 windows x86 arch:x86

69c3a2d1cbb3f0954445282b0e069eb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteEx
StrNCmpW
FindExeDlgProc
ShellExecuteW
SheGetPathOffsetW

user32

CopyAcceleratorTableW
CreateDesktopW
CreateWindowStationW
DdeConnectList
DefWindowProcW

Sections

.text
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE