b568cb39b8771580ef59c733147f3f9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b568cb39b8771580ef59c733147f3f9f_JaffaCakes118
Size

117KB
MD5

b568cb39b8771580ef59c733147f3f9f
SHA1

c6885a3632ff946b6779d9ccdd6982bcca881bfa
SHA256

9845fe624868228407c907229d51b363509d6624cbc0f048ef3116bba2d6999e
SHA512

7edda24ae6fd17a219ce0266b96f555c1ed4723ea02630345896fa89eeae1c9cb543e4b49f3a0d79ef92597b8bd6d8411d05b83c2ac1776c86764c224b4b3195
SSDEEP

1536:uzpoGDl31C8f6SOvaLzX+aXGrj9KABF9SPRFHquxMJOjvSaABsDAwvpKbKQ7LGue:if6SOozOaXGrjdSP9EaA0ByKQ7O/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b568cb39b8771580ef59c733147f3f9f_JaffaCakes118

Files

b568cb39b8771580ef59c733147f3f9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e75e869ea7b8e734022fc82bfaac2d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW

user32

IsCharUpperA
KillTimer
LoadIconA
IsChild
GetActiveWindow

gdi32

GetBkMode
GetTextColor
CreateDIBitmap
GetBkColor

kernel32

GetCurrentThreadId
VirtualAllocEx
GetEnvironmentStrings
GetDiskFreeSpaceA
ExitProcess

Exports

Exports

EdAecccyIs@12

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ