4885b70e1196f2b3c5027d3164adfd6c_JaffaCakes118 | Triage

Sharing

General

Target

4885b70e1196f2b3c5027d3164adfd6c_JaffaCakes118
Size

58KB
MD5

4885b70e1196f2b3c5027d3164adfd6c
SHA1

827bea49235cf6fe1ea44579ae73ab24e849b4f4
SHA256

c24e871268ff59f7820acf460b7b87d038415526c67bfbe8be75d0ea01958227
SHA512

81c36a727c96b412f375f259e79b80e18969bd8cf1d5f3e3a5a46976d9b8ddf830f57197d597f1ed47794514103dc355d33ccf3e01c4491ddee7e06fd9ed38e2
SSDEEP

1536:dy915ADfxpl0xEyfM43RO8/d41uzLTVqOO8RMj4:8915ADh0RMARn/douz/0Uc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4885b70e1196f2b3c5027d3164adfd6c_JaffaCakes118

Files

4885b70e1196f2b3c5027d3164adfd6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53673db857c74fc44437a20f110316d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
FillRect
EqualRect
EndDeferWindowPos

kernel32

LoadLibraryW
FatalAppExitA
ExitProcess
EnterCriticalSection

advapi32

RegOpenKeyExA
RegQueryValueExA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ