4366fff5c8f82a36b18753f207d835a2_JaffaCakes118 | Triage

Sharing

General

Target

4366fff5c8f82a36b18753f207d835a2_JaffaCakes118
Size

285KB
MD5

4366fff5c8f82a36b18753f207d835a2
SHA1

bffb2f20f5cb05a6c23d8076a617f55ffe220d41
SHA256

5e3f82cc588aecb7565924a2bc4a5eecf2d5f819295c656769d7ee6b9baa3fa6
SHA512

09dc315b5037345b6ce9afb16764fc4f2a02b5967fd52069c9f325fc9f1a46f1f1a5ebb390deca6e7cd7abd82937a627026e669535c352ef140538462dca5488
SSDEEP

6144:dAXxNI6JCQtLjfh3G1rM/QI1FBNW9hjLk0F6cQmeOsA1i4iCnTEIly:OBNX9tPNG2/n1HuhMPQsAolyTZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4366fff5c8f82a36b18753f207d835a2_JaffaCakes118

Files

4366fff5c8f82a36b18753f207d835a2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

37cd1610f155a7957a9dd995246e8007

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CreateWindowExW

Sections

.text
Size: 280KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.bss
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ