6496660f8bd59c1e178d2db31934c5e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6496660f8bd59c1e178d2db31934c5e0_JaffaCakes118
Size

138KB
MD5

6496660f8bd59c1e178d2db31934c5e0
SHA1

75693994bcefaa3ab6c22a747a7cb94cfe716762
SHA256

9b96a78bef4369b54a2c7fa12bacc68188e7fae3e27ad1b7ee5ec5c04f16bfb2
SHA512

f3b989a006ff4a7b8c3c6abc86773c8bcc02f8eecafdd2ecf6e8781264f7a2be253f7488573402bf9808c2d48f0e03815d2cf453a9a4cf8e406bcef98fc26e81
SSDEEP

3072:7fnhqclX1RCfBPoFaJ7m6I8HtcFn0PPCwVKS1k5HLXnc:7fnEcvR+OsZI8HtSOrR16LXc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6496660f8bd59c1e178d2db31934c5e0_JaffaCakes118

Files

6496660f8bd59c1e178d2db31934c5e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf137fa0c6ffbf9d5aa0e94094a867

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

RealShellExecuteA
DragQueryFileW
DragQueryFileA
ExtractIconW

comctl32

ImageList_Duplicate
ImageList_Merge
MakeDragList
MenuHelp

ntdll

CsrNewThread
DbgUiRemoteBreakin
LdrAccessResource
LdrEnumResources
LdrGetDllHandleEx

kernel32

CloseHandle
CreateFileA
GetPriorityClass
WriteFile

Sections

.text
Size: 63KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE