626291f3ff188023d1b42c59c2e2bccc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

626291f3ff188023d1b42c59c2e2bccc_JaffaCakes118
Size

295KB
MD5

626291f3ff188023d1b42c59c2e2bccc
SHA1

57cfcf7e87e1202986c240f10a0e6c5a5f12b3cc
SHA256

e0a173347abc2325b1520c695334273a55cd84eff7eb50b1e4bd231dd4cf772c
SHA512

4a860c9057082b6fc8e3b2eefffd7a47fca43edf3c964f95c366d3eb9b90cf7108fbef4934cac9ad49518e72a7f42e6a8719a0de9c27d0785d61abbc75cc88ba
SSDEEP

6144:vhVTCEqDWGQpkB7EDzYWJt8Wc8YBA+eMnIeDdZ0ob8gGCHRdALp:vhtTeB7EDz1fuxBAdcRZ0UGCHRdALp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
626291f3ff188023d1b42c59c2e2bccc_JaffaCakes118

Files

626291f3ff188023d1b42c59c2e2bccc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d9eda758bc874674b57a96fe21273d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA

user32

DrawMenuBar

shell32

SHGetSettings

Sections

.text
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE