77a269c8d17642f679456f677d6c7a22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77a269c8d17642f679456f677d6c7a22_JaffaCakes118
Size

89KB
MD5

77a269c8d17642f679456f677d6c7a22
SHA1

d19313a34aef96969c6b2b0a18e04a1ec9c6fe3b
SHA256

d294c59a11b04931f1eb3bda1561cec41f02c46cc26f0ba456edb9f6df89fcd9
SHA512

520e4f676ce9fbb8939531f4a4448500864f3ab96aa2c1505def5bc9daed1ddcf86259d6fd471ef010f28f849794540893e0c0927058fc7ab55524c33f16c693
SSDEEP

1536:tihvy7YsCQXNzInTRmmgn4/sZ6zGr5mPBPOLv:eRwMMm/BzGtKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77a269c8d17642f679456f677d6c7a22_JaffaCakes118

Files

77a269c8d17642f679456f677d6c7a22_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e17a4d7abe20be456db56a5b970be761

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
lstrlenA
LoadLibraryA

gdi32

ColorMatchToTarget

comdlg32

GetOpenFileNameA

comctl32

ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ord2
ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DAT2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ