d2f593ef1db819b3ad4624b00b35ab01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2f593ef1db819b3ad4624b00b35ab01_JaffaCakes118
Size

90KB
MD5

d2f593ef1db819b3ad4624b00b35ab01
SHA1

cd487a85dda14d8188deb2d75cd72523a80c6a6f
SHA256

7f8b2022e139c164900f43c80247aa0a648826d6719ec0ad4bb674167bb64fe7
SHA512

cdf3e7c6c3333b1a882a1d3456e0a0c0c05492cd02c778dfb9936a25a2edb5020d11e158135480fd160a526242df0048d421ffaacd49d0e91cc0fcc5aa55a1ec
SSDEEP

1536:M0Fvf23fsGyphNxbP6HVs0ZWqgwRr06Wy3qUHOqBGveDYDo+kkUrocJVNkeWwod8:M0l+fs5pXZP6HXgDsQ6WaqS3DWO57VXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f593ef1db819b3ad4624b00b35ab01_JaffaCakes118

Files

d2f593ef1db819b3ad4624b00b35ab01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd6a9c970db698cd048ec81bb7186b5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyMenu
CreateMDIWindowA
CreateIconFromResourceEx
CreateDesktopA
CreateAcceleratorTableA
CopyImage
CloseWindow
BeginPaint

kernel32

GetModuleHandleA
lstrlenA
lstrcatA
VirtualAlloc
UnmapViewOfFile
TlsSetValue
TlsGetValue
TlsFree
RtlUnwind
EnterCriticalSection
EnumResourceLanguagesW
FindResourceA
FreeResource
GetLocalTime
LeaveCriticalSection
LoadResource
MapViewOfFile
OpenFile
OpenFileMappingA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE