be868cfa57b8d252df7e3ec37347a6fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be868cfa57b8d252df7e3ec37347a6fc_JaffaCakes118
Size

118KB
MD5

be868cfa57b8d252df7e3ec37347a6fc
SHA1

88e4db40c4721cace50d78c65b8dab7a38a9654d
SHA256

607b052f658d849908c88ec0a4317cfacd87e6c5e895d3a367ab52526fcbb09f
SHA512

6091f7d0958704e1897db5c091f4063c879bce9c2352b583cf526f3b7edcceccc0bc3b05b6077dc9f3f112180a3c69679d1f65b3d4de740e28b473706fb8620d
SSDEEP

3072:qec9cdR5MbbKGINqrx4OdgcHFJzHTCIdV9Z2A:Ag5obKGSqyOdXv7T77z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be868cfa57b8d252df7e3ec37347a6fc_JaffaCakes118

Files

be868cfa57b8d252df7e3ec37347a6fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc19e10eacce193ce6d23063fcb13b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetTopWindow
GetActiveWindow
EndPaint
IsMenu
EnumChildWindows
LoadIconA
IsWindowEnabled
LoadCursorA
CreatePopupMenu

kernel32

LoadLibraryA
VirtualFree
WideCharToMultiByte
GetThreadLocale
WaitForSingleObject
VirtualAllocEx
VirtualAlloc
SizeofResource
VirtualQuery
GetCommandLineA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
DragQueryFileA
SHGetFolderPathA

Exports

Exports

aaUhu1gEcsZtg@8

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text