c920a8a19e49aa05dd9efe2c435e014d_JaffaCakes118 | Triage

Sharing

General

Target

c920a8a19e49aa05dd9efe2c435e014d_JaffaCakes118
Size

115KB
MD5

c920a8a19e49aa05dd9efe2c435e014d
SHA1

8a66fd62884ebbe6d365a5b531745eb9788d3b12
SHA256

fdacc53ef648bc8786a118fb1d3cfaa0359427b1f72e92bcf0cad9fb676eafa6
SHA512

5727b52ddf8a4280206323bf4e36a287bb47feca9c56ce21c397ce753cf1a4a58d6fa2048c3517f1821f8b838eb10608149e88bb23a4a6ce3611e8d4a2caa172
SSDEEP

3072:GBISHxtrpIby05Q1c7Mnio0Lu4yS1Na1/e1GkOqtS:t8fiGmQyKiPK/eckOqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c920a8a19e49aa05dd9efe2c435e014d_JaffaCakes118

Files

c920a8a19e49aa05dd9efe2c435e014d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37930b8284e5213868aeeba1e017794a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle

comctl32

DPA_DestroyCallback
DrawInsert
FreeMRUList
DrawStatusTextW
DPA_Search

Sections

.text
Size: 77KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE