bb410e28aa6947ba6bc51daa4384a34a_JaffaCakes118 | Triage

Sharing

General

Target

bb410e28aa6947ba6bc51daa4384a34a_JaffaCakes118
Size

77KB
MD5

bb410e28aa6947ba6bc51daa4384a34a
SHA1

8637bed1fd1a28fd8661b664d46384787f8401a3
SHA256

f1c56282042af04da85a429f9b5189a00777bc1cf1426d2cb0f617cfc1e5581e
SHA512

95ff2b1441c7d26ee54b196d291b2e60a3244ea7a34cdd2e9a0a96085c51a9c7270165e4ce7a920f2298928628018d2470c513b355ce5fe92efceee6c1f2173f
SSDEEP

1536:gZytSgxF7bV+i5+5siczcITgtxZmgn9ZutSrclM:HtHF9r4Jiqi6KdlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb410e28aa6947ba6bc51daa4384a34a_JaffaCakes118

Files

bb410e28aa6947ba6bc51daa4384a34a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7908e41278e853073da5db2aada32fcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ModifyMenuW
LoadMenuW
GetWindow
MapDialogRect
IsChild
IsZoomed

comdlg32

LoadAlterBitmap
WantArrows
ChooseColorW
GetOpenFileNameW
CommDlgExtendedError

urlmon

IsJITInProgress
GetClassURL
CoInternetGetSession
CreateAsyncBindCtx
InstallFlash

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE