6079f9693f168f8974113a3b173763db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6079f9693f168f8974113a3b173763db_JaffaCakes118
Size

118KB
MD5

6079f9693f168f8974113a3b173763db
SHA1

00e181619ccd935dd8952d3a8a0107e1ce3cb8ad
SHA256

0dc531d0aa9ab90693b4d610b14f0df19a5d6ba339e1f15cf54005c4bae47076
SHA512

4fef0b2ed4288dbebf69545b6044014ff57938577e6380bd70efbd2ef38e45ec1c14373485e8f27552b635c49b7de63cd56531fceac1021df62cebe5f6ba9df6
SSDEEP

1536:4SJG78zcTQtN00JxTST/3EWs6pZQWcI/IN03JyzZu+NfFl7UMP4d7lYZDlcmEgrh:o7AJFS713PZq03Q5UMP4d7lYIpium4YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6079f9693f168f8974113a3b173763db_JaffaCakes118

Files

6079f9693f168f8974113a3b173763db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dc7ed5482d2f48dd8bf9f122372dfed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DrawEx
ImageList_GetImageRect
ImageList_SetFilter
InitializeFlatSB
DrawStatusTextW
DllInstall

kernel32

CreateFileA
ExitThread
ExitProcess
CloseHandle
CreateThread

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE