07d01031b3e4940be2eef93cf8ba1003_JaffaCakes118 | Triage

Sharing

General

Target

07d01031b3e4940be2eef93cf8ba1003_JaffaCakes118
Size

59KB
MD5

07d01031b3e4940be2eef93cf8ba1003
SHA1

a415364ddf3cde77112a718be6005e42384b6bea
SHA256

9c0265663420cd5c600ff747e498c00e84b0a9e30bd56bbd757101d098a38d34
SHA512

b4cb84ab60d3df7c25410c0525e8037b6822a940e0ca3b3f0bd5e5bb39fa1e229f2a4904568588bf0e0a9812ecb5357c4b9f653b3aaca39770b1ff19ea65d930
SSDEEP

1536:K7wxicTIkFnbTGvoC00453q/WDioqJtrZC:YunFnXfC145ayioqJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d01031b3e4940be2eef93cf8ba1003_JaffaCakes118

Files

07d01031b3e4940be2eef93cf8ba1003_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b67992d4f6590f38463b4cb428209d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
DrawCaption
DeleteMenu
CreateIconFromResource
CreateIcon

kernel32

GetSystemTime
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
VirtualFree
CompareStringA
FlushFileBuffers
GetCommandLineA
GetFileSize
GetLocalTime
GetVersion
OpenFileMappingA
ReadFile
SetCurrentDirectoryA
SetLastError

Sections

.text
Size: 17KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ