777cd237a6eb9a4321431145d58a1bb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

777cd237a6eb9a4321431145d58a1bb7_JaffaCakes118
Size

182KB
MD5

777cd237a6eb9a4321431145d58a1bb7
SHA1

8a68f7c475094bddda5e89bb4e5df359c11167e2
SHA256

bb554331a4d4c8095cb97d1492605a341766bd98e3f5552e35c86af20450683e
SHA512

83eec7d7b1ec5d24760762ac824a2abe660e67ffabf5d8ff443dd3220f40f039d0698a63c83e382428891a3eab22375a50ea3d79d8d863e0e7b89779e2b91886
SSDEEP

3072:yayILEIjNxmkEhn36sdmYmqs3XZlctEX491QL71sVM7PI+qxqL:pE6NG3VdHs3jXonQX1sVM7PD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
777cd237a6eb9a4321431145d58a1bb7_JaffaCakes118

Files

777cd237a6eb9a4321431145d58a1bb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c4747a0645b22dbb3278c3e22717222

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
SetLocaleInfoA
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

GetScrollBarInfo
MessageBoxIndirectA
DdeConnectList
Win32PoolAllocationStats
LockWorkStation
SetScrollPos
GetTitleBarInfo
MessageBoxExW
DdeImpersonateClient

shell32

SHGetPathFromIDList
DragQueryFileA
ShellExec_RunDLL
SHFileOperation
SHPathPrepareForWriteA
ExtractIconExW
SHQueryRecycleBinA
SHGetNewLinkInfo
SHFormatDrive
SHGetIconOverlayIndexW
StrStrIW

Sections

CODE
Size: 5KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE