65759069cec4a791d4bc2746439093d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65759069cec4a791d4bc2746439093d2_JaffaCakes118
Size

118KB
MD5

65759069cec4a791d4bc2746439093d2
SHA1

b0c4a428fdd4a02252e9ae1b93158473c263e87d
SHA256

2e81235bf0028fc52647f2a18926ba644ea5e02b412e94fe852fb08131bd8e31
SHA512

d9796e9133b5093b648795c9895c486a218b694e9b3cf360526c809448925108b39d2df19e40fdc9bcaa44048c039cb2707bcfeee32c57f4849e9311b4d08008
SSDEEP

3072:doINIKrrP7EIaY5MFzNaIr77eosYY2uB4pzn7F14llja:dVN1rP7EhBhvr7xQgp914m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65759069cec4a791d4bc2746439093d2_JaffaCakes118

Files

65759069cec4a791d4bc2746439093d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 68KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE