1c1e49c70437edcc7d7604c0ad95c71e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c1e49c70437edcc7d7604c0ad95c71e_JaffaCakes118
Size

186KB
MD5

1c1e49c70437edcc7d7604c0ad95c71e
SHA1

2c7fc781405f4fbdc96fa8c76a0d4a998ad8659f
SHA256

ab406441186f4124795f4628e54d3789e4ef6cee54cc178bb6ff45e5feb1fd43
SHA512

d8c9e91720b5b98d0c71fa2b23bf7b1eed7151ce42075618ffca0884f9ddc47554cb322917ca8df06e0ee374fc2c302e116ad9617e00722e3ba41f5cdd52da2a
SSDEEP

1536:ajg/hEv47cz4QarWJe2ItP5K3gOAwR/PKWt9fPpnWqZ+9xAcBX5t5x6glucsl0Cz:Cghs4Q2d2IUganbzRLZEicBJwgklh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c1e49c70437edcc7d7604c0ad95c71e_JaffaCakes118

Files

1c1e49c70437edcc7d7604c0ad95c71e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a0163d94388b2776c0975ada7f9ddda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetFileAttributesA
InitAtomTable
PrepareTape
LoadLibraryA

user32

GetUserObjectSecurity
GetUpdateRect
SetWindowsHookA
LoadMenuIndirectA
DdeDisconnect

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 361B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE