bda19106f4f397af8bebda969ae2a093_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bda19106f4f397af8bebda969ae2a093_JaffaCakes118
Size

104KB
MD5

bda19106f4f397af8bebda969ae2a093
SHA1

f95f5b56189ec10354ca10e0e25fc670cadfa4f0
SHA256

b564132d45538864384791a0626e1118e4a857b0d31d4d2f8f8868af3df44cc3
SHA512

69546403efc9a6691cc04933720d7333b08bfbb37f72842ebb122d13f472324c74c0ceaf7bb0202d092e31b4d8682e9f93640ababf86fc3f4557a5bf0b652af2
SSDEEP

3072:1lGS4HdoDpvEie6EfihMQTr/MW6ihwsB2Xh:1l8dKDesMQTrr6ihn2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda19106f4f397af8bebda969ae2a093_JaffaCakes118

Files

bda19106f4f397af8bebda969ae2a093_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae858fafcbb9780ff3a0e33927bb16a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetConsoleMode
FindFirstFileA

user32

InsertMenuA
IsWindow

comctl32

DrawStatusText
ImageList_LoadImageW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 148KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 38B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ