c03d05d0d4906d3ec75fb2a77238d956_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c03d05d0d4906d3ec75fb2a77238d956_JaffaCakes118
Size

167KB
MD5

c03d05d0d4906d3ec75fb2a77238d956
SHA1

ca679c95ad7302d05a09ffd536e3cb16a08cce27
SHA256

8f4d3a79a69416b9143b760bca8d91f1df7af0e97c785107f2870b9788c85606
SHA512

9977fc7bfcce533295f45dfae425bb63284fe511230660d39b1424c90b8aa364f7e04bf17575523879b383b162bee236d6bb35916a3605bb1bb9e2ed0da464ec
SSDEEP

3072:5jC2kNWIZ12ERZ/dXUmdmhUOOzKPuQV64VUWbDN0QcWjnYysL2XhYWl5Z/PdMD4u:5WHNp2ERxpdmuwPNYWjYyPXhYmhd04Gl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c03d05d0d4906d3ec75fb2a77238d956_JaffaCakes118

Files

c03d05d0d4906d3ec75fb2a77238d956_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5deeaf6e6c55ebc66964cb30a086296a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
IsDebuggerPresent
LCMapStringA
LoadLibraryA
VirtualAlloc
VirtualFree

user32

GetKeyState
GetWindowLongA

shell32

ExtractIconExA
SHBindToParent
SHCreateDirectoryExA
SHGetPathFromIDListW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 555B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ