59dc8b0a8e1e6e017992867b05a12664_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59dc8b0a8e1e6e017992867b05a12664_JaffaCakes118
Size

10KB
MD5

59dc8b0a8e1e6e017992867b05a12664
SHA1

0b94c31c303a4e6b8940b7989de1908cd4c53184
SHA256

70471996045cfe116eb00aad3c11a0cb151213bb72b0213fb21ee9fab88f2d2d
SHA512

3b0c8169b3cedba2d9c7ab03fdc97f6076bddf951667c526c3a945a21c8e2aece96b1efb4e94ad4302fdfb943556e31e62c5e7c97a0759257196990881a5d3f5
SSDEEP

192:lqABlD9nWrRs2Lk9iC/gJVOOITkwtwWD5K:lNFmPL1f5ITJtwWDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59dc8b0a8e1e6e017992867b05a12664_JaffaCakes118

Files

59dc8b0a8e1e6e017992867b05a12664_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1976caf61731bcb86abb714f118cc6e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA

kernel32

lstrlenA
lstrcpyA
lstrcatA
GetVersion
ExitProcess
GetCommandLineA
GetModuleHandleA

comctl32

GetMUILanguage

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE