66e8df0ed7ba302d05fe8efb142b974a_JaffaCakes118 | Triage

Sharing

General

Target

66e8df0ed7ba302d05fe8efb142b974a_JaffaCakes118
Size

202KB
MD5

66e8df0ed7ba302d05fe8efb142b974a
SHA1

fc78b06a511e1b5903a0ff1410a2f42f7ce5b074
SHA256

691095c716ccd55bb510055fbc2066d8493f621bd91796f397b3ed4886977da8
SHA512

5ebdcb0e9613fec674f4b95b5e65d449345e719c1938987aabb0127893a1cb8bec80ae156199427063fc911b578e71856de24245f7151a5a00e06d7a0bb1aacc
SSDEEP

3072:T0mwxCnPO6r3A95n4sV4B1YwUO/ftnI5WAquQ7u9Z0498sYxbnGaZ7/ZckI:mCPO9XVS6SQTJH9ubnGc7W/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e8df0ed7ba302d05fe8efb142b974a_JaffaCakes118

Files

66e8df0ed7ba302d05fe8efb142b974a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df2643f0176b7398fe1443ca416a5ff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
CharLowerA
LoadBitmapA
LoadCursorA
CreateMenu
LoadKeyboardLayoutA
GetCursor
GetDC

kernel32

LocalReAlloc
GetCurrentThread
GetCommandLineW
LoadLibraryA
GetCurrentProcess
GetCommandLineA
LocalAlloc
VirtualAllocEx

shell32

SHGetFolderPathA
Shell_NotifyIconW
SHGetDesktopFolder

Exports

Exports

_TRgj5Q@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text