643d5b8c4dc6787c5fa904d70fca4a5f_JaffaCakes118 | Triage

Sharing

General

Target

643d5b8c4dc6787c5fa904d70fca4a5f_JaffaCakes118
Size

100KB
MD5

643d5b8c4dc6787c5fa904d70fca4a5f
SHA1

a07f55042686100b7d148bb59e55a45071df2cba
SHA256

4a78ae493a23e29059acc270ce105516fa70c25357e4f981564608655cf5d268
SHA512

a40e3fdc6a0bb138811459e9f983148464db4bae866decf170d36f6642715bd81ae4bcfd16f600d8562b3d496d3b1fd2ec42cb5139f9f92cebb4c95778ff97de
SSDEEP

1536:PKxMIdaDgu9W0io+7xioLsV19nYIFaznmWANg2/rDa5PS:Ea39p01iks2bzmWAb/rDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
643d5b8c4dc6787c5fa904d70fca4a5f_JaffaCakes118

Files

643d5b8c4dc6787c5fa904d70fca4a5f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b3da036085bfdd5e1d304d73e6abf8c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
LoadLibraryA
lstrlenA
GetCommandLineA

gdi32

ColorMatchToTarget

comdlg32

GetOpenFileNameA

comctl32

ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ord2
ord17

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ