be2a1e471dd6a2f4c96cbe7522fd31a2_JaffaCakes118 | Triage

Sharing

General

Target

be2a1e471dd6a2f4c96cbe7522fd31a2_JaffaCakes118
Size

90KB
MD5

be2a1e471dd6a2f4c96cbe7522fd31a2
SHA1

d88e37bf0c99e38c90fd7fb8ae36697b0dfbe3b3
SHA256

1223d32bb0bb6c0c04ae0cc70e1d60fc033a116758767b81be847a3e70c573c6
SHA512

72d24023ae08e0cb9d8fcfa9027b100b61a97fdaab75a6ef35722fabe5bfd1f4e950865a17e233e886d0dd9133d1b7d9c2a3855ef5eae0d72be1952788551983
SSDEEP

1536:mRA/HOqJkCKDsNGfzXkrYdqq2KIhXmcqR/0XLrfdn0N6h/0QB9PDgx82:YAhCRrXkrjq2h2c6yrfdXh/0QUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be2a1e471dd6a2f4c96cbe7522fd31a2_JaffaCakes118

Files

be2a1e471dd6a2f4c96cbe7522fd31a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

712867192a95fe9462fc4984fdf25b80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

FindExeDlgProc
SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve

kernel32

ExitProcess
CreateThread
FatalExit
CreateThread
FatalExit

user32

GetClassWord
DestroyCursor
GetMenuState
CharToOemW
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE