644b632c800e1ef171583a7713b02238_JaffaCakes118 | Triage

Sharing

General

Target

644b632c800e1ef171583a7713b02238_JaffaCakes118
Size

43KB
MD5

644b632c800e1ef171583a7713b02238
SHA1

d7d47a3964b525be68f6041ca975462c73bba981
SHA256

e1a01bdeb179d123a34c2719a39987bd2bc28a6193cfd79f7617a975edf3a0d5
SHA512

2dd4fa749e7a5c1757e0363ef5edc0189b637fee9e7c59919453a8d82f2827e595bd4493eefb406cd0b360e55d2cd73a945d320833ab68e5d9834a938aef06c3
SSDEEP

768:lcvT/ndu+ot0tj8x6dA/kYvqFfoAFniiTtsPKEK1kLNQst/9S4OuKqs:lurdurGt/dA/kTJoqjt6RastLOQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
644b632c800e1ef171583a7713b02238_JaffaCakes118

Files

644b632c800e1ef171583a7713b02238_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 22KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE