a09905b1b17c10d094d428e8525bc2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a09905b1b17c10d094d428e8525bc2eb_JaffaCakes118
Size

202KB
MD5

a09905b1b17c10d094d428e8525bc2eb
SHA1

e61e0b228a90742132b54ce6f8f5bb813533b4c2
SHA256

031f6252590e8006b61ccdb913715670fe10d5b29cb3e12a60031537ec6bdd32
SHA512

1c681bb11a7d7550a2c5fbb13a0aed9ee37f0b59e8ca98b5a99a6c81cbbe79e05f610dd882eb7164aedb820f27d11b6ee17184d3a051900067102cf51390a999
SSDEEP

3072:T0mwxCnPO6r3A95n4sV4B1YwUO/ftnI5WAquQ7u9Z0498sYxbnGaZ7/ZcpI:mCPO9XVS6SQTJH9ubnGc7Wm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09905b1b17c10d094d428e8525bc2eb_JaffaCakes118

Files

a09905b1b17c10d094d428e8525bc2eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df2643f0176b7398fe1443ca416a5ff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
CharLowerA
LoadBitmapA
LoadCursorA
CreateMenu
LoadKeyboardLayoutA
GetCursor
GetDC

kernel32

LocalReAlloc
GetCurrentThread
GetCommandLineW
LoadLibraryA
GetCurrentProcess
GetCommandLineA
LocalAlloc
VirtualAllocEx

shell32

SHGetFolderPathA
Shell_NotifyIconW
SHGetDesktopFolder

Exports

Exports

_TRgj5Q@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text