850d571cdfd0d71357d84894bfef0359_JaffaCakes118 | Triage

Sharing

General

Target

850d571cdfd0d71357d84894bfef0359_JaffaCakes118
Size

117KB
MD5

850d571cdfd0d71357d84894bfef0359
SHA1

e12551f7d49a2ee0df416ee573de9189e66edc40
SHA256

313346ed192e8e955bd024d3585c96bfdf18be61d203149ccbcf392a2fa4599a
SHA512

57374a141abe2b57da5e8e46b90db2f2375e8e27a0f642462914e5bd40bca97db69584bd4f33f4fd482204547a32828b2b5113385046822e25a8f8021396ccf5
SSDEEP

3072:rYeorhSvWS69hsemQ3vAkHZJngEqUB0Mky:rvWj5vAk5JnvB0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
850d571cdfd0d71357d84894bfef0359_JaffaCakes118

Files

850d571cdfd0d71357d84894bfef0359_JaffaCakes118
.exe windows:4 windows x86 arch:x86

721b1982e247d2eda98d261183da6b2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBkMode
CreateCompatibleBitmap

user32

GetTopWindow
PostQuitMessage
RedrawWindow
LoadIconA
DrawMenuBar
IsDlgButtonChecked

kernel32

VirtualAlloc
GlobalAlloc
GetProcAddress
ExitProcess
GetCommandLineW
GetModuleHandleA
GetOEMCP
GetThreadLocale

shell32

SHGetFolderPathA
DragQueryFileA
Shell_NotifyIconW

Exports

Exports

6mGqr8@20
DGx6L05qt9Idvy
GwijHI9f
_0hsKdWFQz@12
p2T4oz63J6rU

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ