bf8698936518b9b35edabca132807577_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf8698936518b9b35edabca132807577_JaffaCakes118
Size

20KB
MD5

bf8698936518b9b35edabca132807577
SHA1

fe24d48108690a5a3ca5e99f97f1e419b7c36a9c
SHA256

ae5ef9394ae6bb4ac6f591317101e9b528a4584c311b23b40dae85a3556643b5
SHA512

1a37afdc0bca862f16e1bf69a32677e595ca96824c43774024f1075bc68fb672e9d6535cd84b4d1241b8229e7f64a916ce70e47ebf0e95e0ede5b38634cba386
SSDEEP

384:s7jDXLab9sF86k67CJXbkkU4k80kNKHtRuqhH9BRERG73fx:iXA9sFkeCJXbkv4k3kNKNRuypN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf8698936518b9b35edabca132807577_JaffaCakes118

Files

bf8698936518b9b35edabca132807577_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70ab3b7a99b31d90d0da400fa3f749e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

vfwprintf
wcstol
strcpy
wcsstr
wscanf

comctl32

ImageList_Remove
PropertySheetW
ImageList_Add
MakeDragList
ImageList_DragShowNolock

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE