9fdacf81c001406d4331e69caa8b668f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fdacf81c001406d4331e69caa8b668f_JaffaCakes118
Size

282KB
MD5

9fdacf81c001406d4331e69caa8b668f
SHA1

a54005ee52f82db78aecfd2e76326933878bc346
SHA256

6bf52fca79456bdf94470721efa650f12f7680f0d746699dae5c5dbc8f72f446
SHA512

387ae2d4872ab05cce92bb34ee15ce055f8451f8496b44e40eace976fa83eb4b3c51dca860f376b162f5d5505fee71191c8a41d194a80f49f5b323b759ef0c15
SSDEEP

6144:B/UofRHPid8Fse4Wd/VwrQovTrLBlELq/cwWrGif61Pnr3Ki:FphS8FsHWVmrQov/tlgeQMfr3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fdacf81c001406d4331e69caa8b668f_JaffaCakes118

Files

9fdacf81c001406d4331e69caa8b668f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50671ed0c9d5292a6182e0a735a14a13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconA
SHFileOperationA

kernel32

RaiseException
LoadLibraryA
GetProcessHeap
GetModuleHandleA
VirtualAllocEx
ExitProcess

user32

DestroyCursor
GetMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
DeleteMenu
KillTimer

comctl32

ImageList_Write
ImageList_Draw
ImageList_GetBkColor

Exports

Exports

XoVni4w
_dkDdglDdTFTTc@4
DFL11k
_4qVYWr@4
_3WMLSM2hVSL
D0H5X@4
kWuv_@4

Sections

CODE
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ