a9d931c94cdde1f523a3815d51548ae6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9d931c94cdde1f523a3815d51548ae6_JaffaCakes118
Size

291KB
MD5

a9d931c94cdde1f523a3815d51548ae6
SHA1

190d02b5aec7bca2f1724f1337ddde53046e1ef4
SHA256

62d3f6e76bd93fe315ba54a3122a78a07deb5491d264630645da2b137580eee4
SHA512

56af6737f2168eb79dac05cabdf72f8875a6afc098cd50c34bfc062e52b47427924094f7a83f4cacb220cd25dfc4f1fee971a6f19bbc5f869d66c9008e9decd3
SSDEEP

6144:b9fE4gG3LKUyKkRQJqtpeqjOgiQvTwhEYc4AsNw4UThTaVtezRY2X:b9fjgGoKkRjfTniuTgc4nu44aVs9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9d931c94cdde1f523a3815d51548ae6_JaffaCakes118

Files

a9d931c94cdde1f523a3815d51548ae6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61a760e7d283c156cc4104eecedb12bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EndDialog

advapi32

RegOpenKeyExA

shell32

SHGetIconOverlayIndexA

mscoree

_CorExeMain

comctl32

PropertySheet

Sections

.bss
Size: - Virtual size: 104KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE