39c295a8aa7dd04b643003fef5f9d9cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39c295a8aa7dd04b643003fef5f9d9cb_JaffaCakes118
Size

15KB
MD5

39c295a8aa7dd04b643003fef5f9d9cb
SHA1

a5a190c216b9552765ab55831166391012b84ab0
SHA256

2f6d530bfa475a2d8d9569dc29fb2a2d89849351601ffeaf600dde3e63e7fb0c
SHA512

4969a2e02b54467b1259d4525ead2795b1d45a4781bb93a15d792889f6c3562b30057b41834f10f93fe035ec571a91febb2b606e658672f7a8f449f23a0b69dc
SSDEEP

192:C386WkeVUdwc554ET+GUtFMTmirFplELKgRZq64upXHxEbr0u:+8vkeVGwc4EqtFMTmpKgouAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39c295a8aa7dd04b643003fef5f9d9cb_JaffaCakes118

Files

39c295a8aa7dd04b643003fef5f9d9cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f9a8c335649353d947b206f5d7f25bda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
GetStartupInfoA

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize

shlwapi

PathIsFileSpecW
SHStrDupW

comctl32

CreateStatusWindowW
PropertySheetW
CreatePropertySheetPageW

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA2
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA3
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ