837d150795c6be9e25b7516fea847c08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

837d150795c6be9e25b7516fea847c08_JaffaCakes118
Size

118KB
MD5

837d150795c6be9e25b7516fea847c08
SHA1

b04735edd010b3a5c903043ab6126f2696f477d5
SHA256

0d0b45da5dfdf3cf1499130f3f4fb192e41a4ba566b91a17d969b954d9a291ae
SHA512

222cdfb67876f5fe7f1437deccfeee2c3b1d13ac4011752036cd86d4b3f3166ff7ec198fa91f9edf91771c1a11c5bd8f93a189a5fd6fd432f57e96a5125a5e61
SSDEEP

3072:qPa8ZeSedCLtFq4RvTJcOIGaPf0guFHPw:yJZmCDVZTSBNE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
837d150795c6be9e25b7516fea847c08_JaffaCakes118

Files

837d150795c6be9e25b7516fea847c08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba941ec7532495147a16124354aba1f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW

kernel32

GetProcessHeap
ExitProcess
GetModuleHandleA
VirtualAlloc
GetOEMCP
GetThreadLocale
GetProcAddress
GlobalAlloc
LoadLibraryA

user32

IsWindow
CharNextA
IsWindowUnicode
LoadIconA
IsRectEmpty
IsMenu
IsWindowEnabled
CharLowerA
CreatePopupMenu

Exports

Exports

_G8zR5cK@20

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text