b352d57b767f911b833167cf0be4f483_JaffaCakes118 | Triage

Sharing

General

Target

b352d57b767f911b833167cf0be4f483_JaffaCakes118
Size

249KB
MD5

b352d57b767f911b833167cf0be4f483
SHA1

209188f7678af3632ae25d27bfcdc1cfcceafdfe
SHA256

d0eb22d771417e5ea8beb16eb89038633023e5ec26a9e97da22a76a4138837ce
SHA512

bbb415c186725be46c969664eb25f4f94afeaef7b2c9fa5e543ef9008962c174c10d28c60e3e8693a43847275886796cac24cca7c60cfda3810cbc55ea7993f6
SSDEEP

3072:2CHC1DnYXNbEiemFvlyvZNRTCGY1CUGhzA:DHC1DnIneW9yBN1Cf1Cj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b352d57b767f911b833167cf0be4f483_JaffaCakes118

Files

b352d57b767f911b833167cf0be4f483_JaffaCakes118
.exe windows:4 windows x86 arch:x86

642defd6f2039855874a4b435d5e7ac8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
IsDebuggerPresent
LoadLibraryA
TlsGetValue
VirtualAlloc
VirtualFree
lstrlenA

user32

CreateWindowExA
DestroyMenu
DispatchMessageA
GetClassInfoA
GetWindowLongA
InvalidateRect
MessageBoxA
TrackPopupMenu

shell32

ExtractIconExW
SHBrowseForFolderA
SHGetFileInfo
SHGetFileInfoA
SHGetSpecialFolderLocation
ShellExecuteA
ShellExecuteExW

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 849B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE