8b4157899caeb846f2fd5a67f30cd98d_JaffaCakes118 | Triage

Sharing

General

Target

8b4157899caeb846f2fd5a67f30cd98d_JaffaCakes118
Size

123KB
MD5

8b4157899caeb846f2fd5a67f30cd98d
SHA1

2cd9d40dd6f864443452ef5a0e0ad7ce88cf5b04
SHA256

b6261fd839efb2a5d19d1256516248617cb46865d0fed2a3759e1bf92dce1b5c
SHA512

0908fa32e1409634c30481b1d0ec4826f134ca9a525bb0a9dc68245062cf34b3856a8cf593f9cfe9d2587adf1a78352d86f1a538abf45ca7a060f6d3d13daa39
SSDEEP

3072:QZGvWKQsbJUViYn13fLR+sUJfNZOZ/fEA905yvltX:QZc7JbJUViG3fPgZ0nA5yf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4157899caeb846f2fd5a67f30cd98d_JaffaCakes118

Files

8b4157899caeb846f2fd5a67f30cd98d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6099e6690b1150565b271bdfe827f3d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_EnableScrollBar
ImageList_Create
ImageList_Merge
MakeDragList
ShowHideMenuCtl
ImageList_GetIcon

gdi32

CreateDIBSection
DeleteMetaFile
EnumFontsW
EnumICMProfilesW

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE