6042f9a9f22871b3193f01435802e9b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6042f9a9f22871b3193f01435802e9b2_JaffaCakes118
Size

118KB
MD5

6042f9a9f22871b3193f01435802e9b2
SHA1

93931ab1db2b0b4a86d2387fc01759cfbbba3e8a
SHA256

fe56b52003f8515d72c00cff9d8387d915283bc0605d0912dc2a3d279e7bfeca
SHA512

fdc997718c1ef44eec2312a4aac2c75ec76a410b1c77e092433a8894ece95e1fb3f7e574d82b8206a03e53b410c41bc34caa459ce83495ac506b13065ac253d8
SSDEEP

3072:j7lTNX08UZI+GeGW2ppq5idGMUzZKL4X96pw:j7883+G1pM5JMUkL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6042f9a9f22871b3193f01435802e9b2_JaffaCakes118

Files

6042f9a9f22871b3193f01435802e9b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 68KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE