18b1d0484fcfb461e1d5944749d0d9bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b1d0484fcfb461e1d5944749d0d9bd_JaffaCakes118
Size

118KB
MD5

18b1d0484fcfb461e1d5944749d0d9bd
SHA1

4aec417b205cb2396602d599cebe45c25e0c1558
SHA256

4865cffc17e70e71e1c9fd5e45b936878b3a39628a751e305661332c5f0f8a11
SHA512

64b7e6aa9455fd2338f94c70f6052c633651c384f365bfc50d595f0c74055a1b560d26c919ac5da8d8104280a31c46fa3d283cf6c13b1a80e65c4324004648c0
SSDEEP

3072:w/tsRh2lw9r05nxNPJ6RlY1d//VaPLk6vOsiw:wlAaHnfxSY8eF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b1d0484fcfb461e1d5944749d0d9bd_JaffaCakes118

Files

18b1d0484fcfb461e1d5944749d0d9bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fa153bff275b3cf0420a72cec92478e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

kernel32

ExitProcess
GetCommandLineA

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE