3998ac8675e84e419e6ab027b5f46a50_JaffaCakes118 | Triage

Sharing

General

Target

3998ac8675e84e419e6ab027b5f46a50_JaffaCakes118
Size

203KB
MD5

3998ac8675e84e419e6ab027b5f46a50
SHA1

bcfff38c7d59fb65e35cb6c051fb93642bda6d67
SHA256

bc39c212ea28846395e69f52bb9f3d304d7eccab39ae8532292077b4d79939ac
SHA512

668f1a604ce0f72cb4210e0dedf2d7c1b5509ddccf1d3e982387467b38ccdfcc3114198788df45765f8519778c97b670f8fe8f464b351c274af1aac340383b50
SSDEEP

6144:cpCo7JfCSBXfvRhwwzxdMo3bjqmNrQFJJu7pMh51d0:27ESCoFXqmNrhuh51i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3998ac8675e84e419e6ab027b5f46a50_JaffaCakes118

Files

3998ac8675e84e419e6ab027b5f46a50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

deddaaeecbd64df5176f73e3abdffc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathA
SHGetFileInfoA
Shell_NotifyIconW
DragQueryFileA
SHFileOperationA

user32

PtInRect
PostQuitMessage
RedrawWindow
IsMenu

kernel32

EnumCalendarInfoA
FreeLibrary
VirtualAlloc
FindClose
FindFirstFileA
LoadLibraryA
FormatMessageA
FindResourceA

Exports

Exports

3KxEmWuo__E3H@4

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 187KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text