a79f2947edc9daf185253fdd3dee4f74_JaffaCakes118 | Triage

Sharing

General

Target

a79f2947edc9daf185253fdd3dee4f74_JaffaCakes118
Size

117KB
MD5

a79f2947edc9daf185253fdd3dee4f74
SHA1

75abfcd09f0076697f58ccd02f3ed22f2e501cee
SHA256

725f6f3f86f718c4c170d09c687b9aef6e7caaceadf67230e1065197e0c3cc22
SHA512

c5d99453726dacd79ddbc1c57d67314aa1d68ac2d25990a576f5a3dfd1a65b2d163722450cbeb6097da6082269ec9828694a4fbc3a74d602344ccc045e2692a4
SSDEEP

1536:uzpoGDl31C8f6SOvaLzX+aXGrj9KABF9SPRFHquxMJOjvSaABsDAwvpKbKQ7LGuS:if6SOozOaXGrjdSP9EaA0ByKQ7Oj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79f2947edc9daf185253fdd3dee4f74_JaffaCakes118

Files

a79f2947edc9daf185253fdd3dee4f74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e75e869ea7b8e734022fc82bfaac2d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW

user32

IsCharUpperA
KillTimer
LoadIconA
IsChild
GetActiveWindow

gdi32

GetBkMode
GetTextColor
CreateDIBitmap
GetBkColor

kernel32

GetCurrentThreadId
VirtualAllocEx
GetEnvironmentStrings
GetDiskFreeSpaceA
ExitProcess

Exports

Exports

EdAecccyIs@12

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ