d2f71b797f597d40835324ae3ee11bc1_JaffaCakes118 | Triage

Sharing

General

Target

d2f71b797f597d40835324ae3ee11bc1_JaffaCakes118
Size

180KB
MD5

d2f71b797f597d40835324ae3ee11bc1
SHA1

ec6bf0cb9373a4686e202a17e99c5593af5d2ee7
SHA256

17b0e3b871c36bb49bf7186b89891493cbd2b18a993f94f7a1d26ba6fbf054ba
SHA512

c5c5755835ffd98fb156f0b30a95fafc87ade76086cbbc07bc67c0937addc96aecefd10a9db75fc50ca41486043d1de9ff9bf32ba65ceaaaa66e403e575736af
SSDEEP

3072:xqWxfjZ5LwNxKIMGsSnY4m3YwW8Tym1zUATY+W0G60VETh+cAXwupHcJ6KXsmsoL:xqwfTqH/7u9xUl+GVHX4J6osaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f71b797f597d40835324ae3ee11bc1_JaffaCakes118

Files

d2f71b797f597d40835324ae3ee11bc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48a7af828458615d297851d25d46cfac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW

rpcrt4

NdrFixedArrayFree
UuidCreate

kernel32

FlushInstructionCache
DuplicateHandle
FindFirstFileA
MapViewOfFile
EnumResourceNamesW
OpenWaitableTimerW
FindResourceExA
GetModuleFileNameW
UnmapViewOfFile
FindClose

shell32

Shell_NotifyIconA

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ