bce49cc84eb874630f605e22eb99f730_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bce49cc84eb874630f605e22eb99f730_JaffaCakes118
Size

91KB
MD5

bce49cc84eb874630f605e22eb99f730
SHA1

6a7dd8d39ffd4453238c125bf251809ff3c92aa7
SHA256

d54d84343e5832cbcbf5f4907828d9edbf9e4accf865e3630157ebef5e08b2da
SHA512

f33a1b0e0124b9391b5e390f8a95203ad6bbf7b97bcaf0145a77bf2ecb3073ce27438e160afc34a046a2c1fb8ade4a63261db0f6d59efd72a2a2dd10f2fcdac1
SSDEEP

1536:Lyeu4fZxBOnc/86Aw/BNNsKb3ccaUv+aqjK/u:mehjOEew/BNZdFTqjK/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bce49cc84eb874630f605e22eb99f730_JaffaCakes118

Files

bce49cc84eb874630f605e22eb99f730_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5b59867f1c94425f679a04e0c129f09b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCommandLineW
GetStartupInfoA

user32

LoadIconA
RegisterClassExA
CreateWindowExA
DialogBoxParamA
GetMessageA
LoadCursorA

gdi32

CombineRgn
ChoosePixelFormat
SetWindowOrgEx
EnumEnhMetaFile

shell32

SHGetPathFromIDListW
SHChangeNotify

shlwapi

StrChrIA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ