b640a7a5afbb4b049bab2c66f60798d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b640a7a5afbb4b049bab2c66f60798d2_JaffaCakes118
Size

26KB
MD5

b640a7a5afbb4b049bab2c66f60798d2
SHA1

b5d0307084bc01cf333a86aa3eba57b6b63271f9
SHA256

0bde6a9b3782f7b313691d91dc609e278310e9732d414494256435e36d848070
SHA512

f289c56852d1e86ce95be2c0e705cb132ad382ead838841341f495e6273395d0947afa7d79ef0d316097473c1bca36067b6b86c7d68627203df37203f73556ad
SSDEEP

384:U/UlgK3YdUHz1XOdGChT+wPbmEkFGOMtdLKNcxkhSJB6PrQ2Oo4YmlC:Usv3/HzdOMCR3Pbf1+OkUX6PkB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b640a7a5afbb4b049bab2c66f60798d2_JaffaCakes118

Files

b640a7a5afbb4b049bab2c66f60798d2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0075fe43d16cc61acd80ac01c8d334f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_strtoi64
_ui64toa
_unloaddll
_vscwprintf
_spawnlpe

comctl32

PropertySheetW
ImageList_Create
ImageList_GetDragImage
GetEffectiveClientRect
ImageList_GetImageRect

Sections

.text
Size: 14KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE