76deb26dc437d239ef66e068389922d4_JaffaCakes118 | Triage

Sharing

General

Target

76deb26dc437d239ef66e068389922d4_JaffaCakes118
Size

108KB
MD5

76deb26dc437d239ef66e068389922d4
SHA1

7b2adeaf6a19850c25ad8828e3cc8c83664f2c36
SHA256

b829479d86180fa5b930ec86bd4974d5d8f076bfdacea639aa18be1c56d113b7
SHA512

c8d1fbe1a646eac50611d6185b97136516d3fee69ecf00c5a9b05b03fe3caadc3498b768d115f4d97d19857579322a3ab264ed4e39821f7ca8bb0579ea354417
SSDEEP

3072:XmTygsS7FfBLKQCG0sXAp/+9i1bsqDN9j5+KC1EQR3:CsabGrsqDN9nC1BR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76deb26dc437d239ef66e068389922d4_JaffaCakes118

Files

76deb26dc437d239ef66e068389922d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37930b8284e5213868aeeba1e017794a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle

comctl32

DPA_DestroyCallback
DrawInsert
FreeMRUList
DrawStatusTextW
DPA_Search

Sections

.text
Size: 75KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE