c7b094fbbe049949b811fa3e084af6df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7b094fbbe049949b811fa3e084af6df_JaffaCakes118
Size

98KB
MD5

c7b094fbbe049949b811fa3e084af6df
SHA1

914e05270225e1cef4d123a4a113f72709926f8e
SHA256

bb7323893c221c66253ba2a93977b1ce90a32ce561c6c226cae11d97f783b7bd
SHA512

9069502d4eedad32f9a71b85fe0c71852202640a32782b1772c04ce6ed6e71cad1b8edad0fa68504ddb3a06981f553dfe82ba5370e58da5b9dfebddd33f8f3d0
SSDEEP

1536:lXIDAAFOTPIibPeBkb3VVLzQWmJHKnyVvRqud++Z+a0uAxS3iE+2P5U+s7HHZpl:l4DAUCvreBkb3PvmFGoRxJ9NR3Ql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7b094fbbe049949b811fa3e084af6df_JaffaCakes118

Files

c7b094fbbe049949b811fa3e084af6df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

517600fe95ef190e533d3540cf50ead0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
MapViewOfFile
OpenFileMappingA
RtlUnwind
SetLastError
lstrcmpiA
lstrcpyA

user32

SetFocus
DestroyCursor
CreateAcceleratorTableA
ChangeMenuA
EndMenu

shell32

ShellExecuteExA
Shell_NotifyIconA
SHBindToParent
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteW
ShellExecuteExW

setupapi

SetupGetInfFileListA
SetupFreeSourceListA
SetupFindNextMatchLineA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ