24a0ab4abd8da6891b971ddb3a04bd1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24a0ab4abd8da6891b971ddb3a04bd1e_JaffaCakes118
Size

360KB
MD5

24a0ab4abd8da6891b971ddb3a04bd1e
SHA1

a835a0cdf17c709f390cd714c095f4c35c512ca6
SHA256

c97c114cf1a5b4b2f6044355c7bd3cf95ab6826797a1dc61575dc88746a7b0e5
SHA512

afad9e7a47f9393ce854c5184ec7249ef8a3c5d82dea3dec3ffe1fc47240dd30f9eac18874fd62d5aa4a38f2fd45f7782b6761f5d9f65650b37c8f2ed6e09555
SSDEEP

6144:RUYK06M49kYzrDz9zySdQ6m4fFpxJDnYIQuciML7uusZd+wUv/UbY8g68eh:zK06t79W8xfFpxJDMupMAd8H8bp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24a0ab4abd8da6891b971ddb3a04bd1e_JaffaCakes118

Files

24a0ab4abd8da6891b971ddb3a04bd1e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c76565d3af11b98ee1de5043cf9af37e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

advapi32

FreeSid

comctl32

InitCommonControls

gdi32

SetBkColor

ole32

CoInitialize

oleaut32

LoadTypeLib

shell32

ShellExecuteA

user32

GetDC

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p4ofixlv
Size: 563B - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ