af48240cd5517a7bdd833753de90bc9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af48240cd5517a7bdd833753de90bc9c_JaffaCakes118
Size

202KB
MD5

af48240cd5517a7bdd833753de90bc9c
SHA1

c2094a5a3202ab0b1d4212e9da22a4553e11842c
SHA256

05750571d42345d9235e4288c8aa9eee10497238915d2f2c39b6ec116c32c2da
SHA512

18317bb807f2ad6c48e5e4f3c3e6a4aa640c19ff4bd331251f3a916312b040e2a20ee7db09d8bfce4ab367c45c92cbb9c206427ac0b17a2c9685eacd5a761fdb
SSDEEP

3072:T0mwxCnPO6r3A95n4sV4B1YwUO/ftnI5WAquQ7u9Z0498sYxbnGaZ7/Zc4I:mCPO9XVS6SQTJH9ubnGc7WT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af48240cd5517a7bdd833753de90bc9c_JaffaCakes118

Files

af48240cd5517a7bdd833753de90bc9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df2643f0176b7398fe1443ca416a5ff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
CharLowerA
LoadBitmapA
LoadCursorA
CreateMenu
LoadKeyboardLayoutA
GetCursor
GetDC

kernel32

LocalReAlloc
GetCurrentThread
GetCommandLineW
LoadLibraryA
GetCurrentProcess
GetCommandLineA
LocalAlloc
VirtualAllocEx

shell32

SHGetFolderPathA
Shell_NotifyIconW
SHGetDesktopFolder

Exports

Exports

_TRgj5Q@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text