18ca925f481cb2ccda2770b8bd11e98b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18ca925f481cb2ccda2770b8bd11e98b_JaffaCakes118
Size

101KB
MD5

18ca925f481cb2ccda2770b8bd11e98b
SHA1

030988b699b30e46ec0f5021862df7637c12dd9b
SHA256

c991cc62a4d2839f3d3c10d181094216a5c4f1d64f7e5274cc7c3000b417d72b
SHA512

2352756ad46ff24b376726b0750ae4778f5747cee7066372bdc9692845c9b1f5514af61fedafd857e0bb5e39e428a4a0c77d25a7bd38483e8952cf9ef80aa216
SSDEEP

3072:NDmxJgvWShkLsQd8Xl/S+6luYWAV9jfAxKn8:AgOSMKlKLlrV/0xKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ca925f481cb2ccda2770b8bd11e98b_JaffaCakes118

Files

18ca925f481cb2ccda2770b8bd11e98b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e415988d81bde52d4c6d5135b474e0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
DefineDosDeviceW
VirtualProtect

shell32

CheckEscapesW
StrRChrIW
DragAcceptFiles

Sections

.text
Size: 42KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ