b5743e9d73baff78fb956dfd218884c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5743e9d73baff78fb956dfd218884c7_JaffaCakes118
Size

157KB
MD5

b5743e9d73baff78fb956dfd218884c7
SHA1

9fb0ac4a4e5ba86dddc14d2a069d878301c6b234
SHA256

2051b39c0facfc2ca8b68c6cf9e5ca1386c4fa14d5627d0696deba46e9dc8054
SHA512

52c8b3036722565be415efe1fcfaa0c39268401e264cf3317cb8b30ca6732779a82fdc4f800158a6cee38920562fc57d27f1424717522025eb4e16815b90ef0e
SSDEEP

1536:IrW2rWtLDUjKm79U7Qnv74/fR9CuT11kIBakvWZ3PvQE8:Ir0K79U7Qnv7AfBTDkp9Xe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5743e9d73baff78fb956dfd218884c7_JaffaCakes118

Files

b5743e9d73baff78fb956dfd218884c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3127087979ad94c507ae58d55e3d751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHGetFileInfoA
Shell_NotifyIconA
Shell_NotifyIconW

oleaut32

OleLoadPicture
SysReAllocStringLen

user32

PeekMessageA
OpenIcon
OffsetRect
OpenClipboard
GetMenu
GetFocus
GetWindow
OemToCharA
CharNextA
PeekMessageW

kernel32

LoadLibraryA
ExitProcess
VirtualAllocEx
GetFullPathNameA
GetFileAttributesA
GetFileType
GetThreadLocale

Exports

Exports

_XmtMY@12

Sections

CODE
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tpdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eedata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ