62114dfa628d8c687a80d2edee98c23a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62114dfa628d8c687a80d2edee98c23a_JaffaCakes118
Size

118KB
MD5

62114dfa628d8c687a80d2edee98c23a
SHA1

8f374bf809561ba94c84fe9861c0399cfbba8f20
SHA256

4a9e0a8ad188231ed88fb7bc4cf7565a8c6daa5a7e8bd57c16e3f3cc6d7ba76d
SHA512

684b1092aa05d96d9f810b7ce3842d266cd35b98bf7deef48e66f6b49ed5f820ffcea1d37f512369d78a7a18a088f24c153f1130361d28922ebf310739750e42
SSDEEP

3072:qec9cdR5MbbKGINqrx4OdgcHFJzHTCIdV9ZpA:Ag5obKGSqyOdXv7T77o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62114dfa628d8c687a80d2edee98c23a_JaffaCakes118

Files

62114dfa628d8c687a80d2edee98c23a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc19e10eacce193ce6d23063fcb13b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetTopWindow
GetActiveWindow
EndPaint
IsMenu
EnumChildWindows
LoadIconA
IsWindowEnabled
LoadCursorA
CreatePopupMenu

kernel32

LoadLibraryA
VirtualFree
WideCharToMultiByte
GetThreadLocale
WaitForSingleObject
VirtualAllocEx
VirtualAlloc
SizeofResource
VirtualQuery
GetCommandLineA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
DragQueryFileA
SHGetFolderPathA

Exports

Exports

aaUhu1gEcsZtg@8

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text