d021272a1a7f7b3bf338222abe934339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d021272a1a7f7b3bf338222abe934339_JaffaCakes118
Size

56KB
MD5

d021272a1a7f7b3bf338222abe934339
SHA1

a19082586d60420762f12150883f0801e5f43673
SHA256

c6c122f06148921df9322bde81eddf149bfd6b1aa7775d407a5cf5a4497e15eb
SHA512

844a19d75ba01daea11902ec7f917d117435f79026f638b65663e34663b1458bfbd2237ccaba6986a5b0acab9b634685ecab38c4751a91d512011f85dbf9da4d
SSDEEP

768:AOkgC8F/F4YVKeRwuLq55PC/XgpXqQf55QkvQqIRAVG+wDpULCXxd5162oi:5CaF4ibwegr5GIIRAQpUL6xN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d021272a1a7f7b3bf338222abe934339_JaffaCakes118

Files

d021272a1a7f7b3bf338222abe934339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d0d4bea6e1382c46b1add83945b6841

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCPInfo
FindAtomA
DeleteFileA

user32

GetWindowTextLengthA
CloseWindow
LoadCursorA
InsertMenuA

comctl32

ImageList_DragEnter
ImageList_EndDrag

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 82KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 173B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ