353a151d96e1f02208baff2bd2ac521b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

353a151d96e1f02208baff2bd2ac521b_JaffaCakes118
Size

190KB
MD5

353a151d96e1f02208baff2bd2ac521b
SHA1

ba10a78aa2ba5aa241c649aca79ad9ef9cf4d4aa
SHA256

7e80dc22ecfab2854643ae634869d10b28a3c49647a499d8654cf5598de84918
SHA512

3082aceba11a1c16ab898ff1bdd0173a2e8dad23812082554112f3c5a0eacdef5979b1466068585237ac092001c0b94c53203ebb198d3469c0dffe7d79a23cf0
SSDEEP

3072:9v8LsVNEjNxEfWL6vpdOwHzy21Ft8osk0n2Hhim/SaD2+NregQzip3J8jJt3P:9gQGjXVevjBHd78osk0n2HLxDGMtJ89J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
353a151d96e1f02208baff2bd2ac521b_JaffaCakes118

Files

353a151d96e1f02208baff2bd2ac521b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

023197f38ab9865d94632343d1d23695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommProperties
EnumSystemLocalesA
GetSystemDefaultLangID
TerminateThread
UTUnRegister

user32

ScrollWindowEx
UnregisterClassW
FindWindowW
MsgWaitForMultipleObjects
GetDialogBaseUnits
GetCursor

shell32

DoEnvironmentSubstA
SHQueryRecycleBinW
DllUnregisterServer
ExtractIconExA
SHCreateDirectoryExW
SHGetSpecialFolderLocation
SHCreateProcessAsUserW
StrRStrA
InternalExtractIconListW
SHIsFileAvailableOffline
SHGetFileInfoA

Sections

CODE
Size: 9KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 177KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE