89e1f3462fbc0005c7a91c08e76e3043_JaffaCakes118 | Triage

Sharing

General

Target

89e1f3462fbc0005c7a91c08e76e3043_JaffaCakes118
Size

55KB
MD5

89e1f3462fbc0005c7a91c08e76e3043
SHA1

7a52e9267f1abb6fcc3ba6bd9560709f0a302e05
SHA256

1597495e4f582e628545df440ac4bad68710f64cbafc7c29297477dc91fa5c5b
SHA512

dc2b0b6a85f0380a5f2e756c2ab68e100be6de2fcadaa3dacc303d648ff38c0ddd7669345a99fad285e29e604c6259fa8a958e25791cef643da7ec50b8c683b0
SSDEEP

1536:JW83Hgrjh4oggfjxY/ci232FijBjpPK9uS:khv+oggfqEi2GcjBNKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e1f3462fbc0005c7a91c08e76e3043_JaffaCakes118

Files

89e1f3462fbc0005c7a91c08e76e3043_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db18847601bb40026d7f45b8ac9ca6f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
_lcreat
lstrcpyn
GetProfileStringA
SetCalendarInfoA
FoldStringW
DeleteTimerQueue
SetProcessShutdownParameters
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

SetPropA
DrawIcon
TabbedTextOutA
LookupIconIdFromDirectoryEx
SetClipboardViewer
AllowSetForegroundWindow
WaitMessage
BroadcastSystemMessageW

shell32

DllRegisterServer
StrChrIA
SHIsFileAvailableOffline

Sections

.text
Size: 5KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE