414e8e499ac29aa045177a4135256a73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

414e8e499ac29aa045177a4135256a73_JaffaCakes118
Size

122KB
MD5

414e8e499ac29aa045177a4135256a73
SHA1

0ec224e530b901c0363e41ac43ddaa7561560ce1
SHA256

4bcf82dffc5f33745acd20ee4f147e1212209002eea22244d1d799b38d2a28fa
SHA512

0f0742702fa81e2cd7e93cd35e8cb8194e7335acd3fab12e23296089d0dfa922016cd5f4ac5d16b5b715b741b06346b7b883a647bab33096cf50a1b58f8874e1
SSDEEP

3072:a4jTrjFPGnTE18A5A03z5W8+RQJggv7TxM/gmkMWf6XtID:1FiQLAgWXEDdMIJM3Xy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
414e8e499ac29aa045177a4135256a73_JaffaCakes118

Files

414e8e499ac29aa045177a4135256a73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5caeba947b8c737e72f7f4c514b00e1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Merge
FlatSB_EnableScrollBar
MakeDragList
ShowHideMenuCtl
ImageList_GetIcon

gdi32

EnumFontsW
CreateDIBSection
DeleteMetaFile
EnumICMProfilesW

Sections

.text
Size: 68KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE