881689690a8557318bc1311db018556f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881689690a8557318bc1311db018556f_JaffaCakes118
Size

108KB
MD5

881689690a8557318bc1311db018556f
SHA1

1fa392cba2ea1d9a7d43bc5dbb390f88cd1f711a
SHA256

792256e1e507a1765fa7ba3f0fce5263918b6260d396d6b06b76c09e9b1fb536
SHA512

4cd49976eb1020e08e854a48b0a55d809c62d4894f08c43213e855ae9b4386b2b99076ca1457d98a785f84e5f8b9fbbfaedb1dedaa502e681a83db42e1b82db8
SSDEEP

3072:fI2RhLQ4ea+ROC6UGC/817Q3O1xYm1ivevGJZ:fI2RhLQLa1C5GUYAaxhST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
881689690a8557318bc1311db018556f_JaffaCakes118

Files

881689690a8557318bc1311db018556f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37930b8284e5213868aeeba1e017794a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle

comctl32

DPA_DestroyCallback
DrawInsert
FreeMRUList
DrawStatusTextW
DPA_Search

Sections

.text
Size: 75KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE