b03b6b60a2f7c93974a0f4d5d4157b43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b03b6b60a2f7c93974a0f4d5d4157b43_JaffaCakes118
Size

109KB
MD5

b03b6b60a2f7c93974a0f4d5d4157b43
SHA1

700bb781dc586a1349cd17eada22d34177090865
SHA256

1cd651e4f483233b3e72fbf4ae8c1006adbbcd1583b6621f0c12b7dec419c4a6
SHA512

f83bc50c30fe82157c28646b1b21bc956bdfe981c91cfcc6181cc56b80397d6a13de53c1db761989b63bc3ccb42b245ff4b3999866b79746cac558fcbc4fa0f4
SSDEEP

1536:/WSJltozCJthe7BD/YMh3jNG2mqgBnoAQx8ghodYkm:/mmhKddgBnoHxAdYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b03b6b60a2f7c93974a0f4d5d4157b43_JaffaCakes118

Files

b03b6b60a2f7c93974a0f4d5d4157b43_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0ed5b1d85d215afd42f0fbc10e7158f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize

shlwapi

PathIsFileSpecW
SHStrDupW

comctl32

CreateStatusWindowW
CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ