61c1b8ac346e929a38022cb21656aa68_JaffaCakes118 | Triage

Sharing

General

Target

61c1b8ac346e929a38022cb21656aa68_JaffaCakes118
Size

26KB
MD5

61c1b8ac346e929a38022cb21656aa68
SHA1

0ac760e776e277eafdcbfa4804682631b154f876
SHA256

438faeb89cba41498b52aa7db74f9e380ba2ed2e195d3a33671ce96621be7dad
SHA512

e732e1f275bd5a83c255b768d7b9b4fc86a61d11caed4d5faba303d4711635d7023fffc357c341ec21f41d888013e5b5f1356251c80c33a5ced5b46218585ad1
SSDEEP

384:iQRumlonC8Gkt9NJEORzS9WrgsRj1BSicMKc6srVv4lW3s/56sMwh5gte8oWzQfS:iQNSfGMNJEOUWrBRjTLcMSSVZsR60nu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c1b8ac346e929a38022cb21656aa68_JaffaCakes118

Files

61c1b8ac346e929a38022cb21656aa68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f49b776c18ef6494dabb67a03c819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 145KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE