39cad6460dd40baed4ffc4eebeb65685_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39cad6460dd40baed4ffc4eebeb65685_JaffaCakes118
Size

119KB
MD5

39cad6460dd40baed4ffc4eebeb65685
SHA1

7acef7c4861cc282d080f4c65cc04c4f0880fac7
SHA256

b3d7ff79dc1903fecd08c30f2d074eed86d959485e1c26f7322bd3f19ce62328
SHA512

8af1c673a26b9b57b7be74acf7fed43dd59c413fd82bf3b3ae752525dd17457b197d0ca3c98a67aff9b5dc819c2ab071dfccdc87cf8d14235954003a89d5c0a7
SSDEEP

3072:TEq35fmgYnKXcnS51t1kLV2XvagAe1pENV2/PmY7rM1UX:QXgYwcS5KLovahe1WNVYmwmU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39cad6460dd40baed4ffc4eebeb65685_JaffaCakes118

Files

39cad6460dd40baed4ffc4eebeb65685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dc7ed5482d2f48dd8bf9f122372dfed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DrawEx
ImageList_GetImageRect
ImageList_SetFilter
InitializeFlatSB
DrawStatusTextW
DllInstall

kernel32

CreateFileA
ExitThread
ExitProcess
CloseHandle
CreateThread

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE