a6601396632bad6bd3aa07b7258426ed_JaffaCakes118 | Triage

Sharing

General

Target

a6601396632bad6bd3aa07b7258426ed_JaffaCakes118
Size

129KB
MD5

a6601396632bad6bd3aa07b7258426ed
SHA1

f866a1fcef43fa20b05f21cae9862aac2f3e57d7
SHA256

410c9c7bde0827f0b59ae71b87efa4826484575ed12e4b3904b1d22df18d6de4
SHA512

22c7f685da05d6f36171c88837473bcb3b829abc02e2e8f76ac105c85acefd2c25f402e6f34b979d2d70927fc86cc845d5db4f73c34aa181fca50c627add8eb3
SSDEEP

3072:s6K4roryHyyPpuSRvBPNEO51d3fKqKs9mUqOmFBf9jjD2F4Pe:s6wr0u2BP551lCqpmUZmf126

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6601396632bad6bd3aa07b7258426ed_JaffaCakes118

Files

a6601396632bad6bd3aa07b7258426ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de1beab47afc2fa567179d275a0f9376

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

kernel32

LoadLibraryA
VirtualAlloc
LocalAlloc
GetLastError
GlobalAlloc
GetFileSize
GetFileType
GetThreadLocale
GetFullPathNameA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA

user32

SetMenu
IsWindowEnabled
IsWindowUnicode
GetMenu
SetParent
SetMenuItemInfoA

Exports

Exports

nrZ3KrrF@8
t8JUbWpeHH
KLNeqaLGHqPX@12
_Ez_97H@8
108OmS
_JJKy3wvomqoN
G09JjR@12
idRzCiqK@12
_x6XxI
_foL_QgAARE
g3hOcbWf
_lf0IgK@16
_B8Ywouv@20
_5CwTp2fJzLuv@12
B8Zbd
sZasxH8N_
qaOtPcrDIyaq@8
VREDZfk@24
CyfGkjGDsUbog@12
_nF5QZPvHNgZ@24

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ