ada852031fe22c80e422fce0077b6dae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ada852031fe22c80e422fce0077b6dae_JaffaCakes118
Size

15KB
MD5

ada852031fe22c80e422fce0077b6dae
SHA1

eeb7344f47760cb8b9d47fac024a83f9fddc7b9e
SHA256

7d8b95df2919e06c392517f587fd37e9b91dcf900b5cecec3f6a416c906ffe41
SHA512

274b8f3edec397aeb809ddebdbfeadf81e15ded43d38eb75b343bf79c2337dcb8635785a0a8f5279ca12db156cfb7ada76269c1900cd31fc26e942e56b8d85e9
SSDEEP

384:5yrsUbxfm81gbm6vo6EIZxr17WHNK05f9Dj2AAJFLskymH:kosmCgbRvo6BZxr5eNnf9/2ACH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ada852031fe22c80e422fce0077b6dae_JaffaCakes118

Files

ada852031fe22c80e422fce0077b6dae_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f74d6f231e3188e4f1e122bf3a9cb142

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHLoadInProc
DragQueryFileW
ShellAboutA
ShellHookProc

kernel32

GetConsoleCursorInfo
GetConsoleCP
GetVersion
FreeResource

comctl32

ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Write
LBItemFromPt

ntdll

LdrLockLoaderLock
LdrSetDllManifestProber
LdrShutdownThread
NtAlertThread
NtClearEvent

Sections

.text
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 4B - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE