956e02a0edddc326faec1fed6e276ddd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

956e02a0edddc326faec1fed6e276ddd_JaffaCakes118
Size

119KB
MD5

956e02a0edddc326faec1fed6e276ddd
SHA1

b6f67554859d153292d45f17bcc50851e87ef09a
SHA256

a716e63ee51550482d8ef1c3f6a726c0985278fc2821bd36159e774e267ce01f
SHA512

5e7f7310b5381af5ea99037c559029df1c1c6fc1b1983c422fe2388722147639382b6a56f234af9de2961ed10bba6a08d5af0775914277b4d4b7f96785fdb7f8
SSDEEP

3072:Subw23QLJzNR/ZmJIxG03YWSAtC1AEHF3XCQ:SzRRmJgoAtclh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
956e02a0edddc326faec1fed6e276ddd_JaffaCakes118

Files

956e02a0edddc326faec1fed6e276ddd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE