b79c54f219f62e5514d943d58d0b5b56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b79c54f219f62e5514d943d58d0b5b56_JaffaCakes118
Size

119KB
MD5

b79c54f219f62e5514d943d58d0b5b56
SHA1

83bcfc2c040359d432b1495260423453a2af1862
SHA256

dd492f9832c89f8bb68caeb4df12f68a1f379c6e2fbe8b280709af0b27f4553a
SHA512

37dc391645b3ca867ef88d90086dcda79048b99897702dc3b1c500c620560839bf1dca3e4505cc85c1cf09aea3313194ffbaf422399c462267f80e3f99ad93c6
SSDEEP

3072:Subw23QLJzNR/ZmJIxG03YWSAtC1AEHF3XCE:SzRRmJgoAtclN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b79c54f219f62e5514d943d58d0b5b56_JaffaCakes118

Files

b79c54f219f62e5514d943d58d0b5b56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE