1be980829fcb7fd2a9fca7906bf2799b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1be980829fcb7fd2a9fca7906bf2799b_JaffaCakes118
Size

140KB
MD5

1be980829fcb7fd2a9fca7906bf2799b
SHA1

29b89fac69250744cd6b03c4376fbc1ee16209dc
SHA256

1381603b8c8723177a5ca91728e2768034a1fe634fa38fca3db4e2c2eebbe9d4
SHA512

9898a7ddd31ddfd6e7626ac91c56e6e098f274a80a793db6737ddc4abd1b4c869775ef98ea4526b187d313f7f413593f137c4ab8b735cfe7ee380a2ea2f1b18b
SSDEEP

3072:qzmUo0Dr1jx6Cy2HYSA5JWZtGWelJf/aSf0rBfukKeNYXaGvlDjO6:qxoU1yOA5UZ2Jf/rouZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1be980829fcb7fd2a9fca7906bf2799b_JaffaCakes118

Files

1be980829fcb7fd2a9fca7906bf2799b_JaffaCakes118
.exe windows:6 windows x86 arch:x86

5aeb93b64fcd2bcf83854be75ea8d924

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsMenu
ChangeWindowMessageFilter
GetWindow

winscard

SCardListReadersA

shlwapi

ord29

kernel32

CloseHandle
GetCurrentThread
GetSystemDefaultUILanguage
GetCommandLineW

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bg0WEZ
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rzzzr9
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ