cf93622427f0c78fb73308efdb2fab5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf93622427f0c78fb73308efdb2fab5d_JaffaCakes118
Size

9KB
MD5

cf93622427f0c78fb73308efdb2fab5d
SHA1

5d7152f0eb76f8e06829a3b4bdf8c6880736cd4d
SHA256

52a663aca08da035bc61ae39777b0c30f2affbaa53d64ab3749ce56c802f0f1f
SHA512

c58081e49c68b5a7495ae1c7928c564496ef5db2432adcb781958ece198fe9e56f53be7de5b4a34d4936b164f17986c5614f1e62f05b038d32aa060cc96a5db8
SSDEEP

192:rdb1REGUYNKhG9gH1hj8tPMVcMBuCdswIatmxTglXKlq:rXREaNyhj9cMBBkatmxslXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf93622427f0c78fb73308efdb2fab5d_JaffaCakes118

Files

cf93622427f0c78fb73308efdb2fab5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf137fa0c6ffbf9d5aa0e94094a867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

RealShellExecuteA
DragQueryFileW
DragQueryFileA
ExtractIconW

comctl32

ImageList_Duplicate
ImageList_Merge
MakeDragList
MenuHelp

ntdll

CsrNewThread
DbgUiRemoteBreakin
LdrAccessResource
LdrEnumResources
LdrGetDllHandleEx

kernel32

CloseHandle
CreateFileA
GetPriorityClass
WriteFile

Sections

.text
Size: 4B - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE