be6f49f94b64359d54145a0703648419_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be6f49f94b64359d54145a0703648419_JaffaCakes118
Size

103KB
MD5

be6f49f94b64359d54145a0703648419
SHA1

448ceb1c31a06ef3ea810310da21b2ec1c814b68
SHA256

fbf0769f7eeee6c594de3cb3f1fd9fe298fa539bb9680258f8e0bf43d65e46d2
SHA512

947aca9ea5401fb6b1e84be1985c9eef112d67e474a4d93d96095e87a690196d815ee97afbc0ed2c11e532e8aca9415bd24a487811cfb5ebba6617dbcf2e9fc1
SSDEEP

3072:Sq4c3Rnwoqpqxp/7Ygwu1s6ptdgVghsp:D4chnwoqgULuVtt+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be6f49f94b64359d54145a0703648419_JaffaCakes118

Files

be6f49f94b64359d54145a0703648419_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84cf1a3e5686410e3ce88b5cbf494c1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetStdHandle
ReadFile

user32

DrawTextA
CreateIcon

comctl32

ImageList_DragEnter
ImageList_DrawEx
DllGetVersion

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 148KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 108B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ