d1104e7df24381aa0d19c6ca92db60fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1104e7df24381aa0d19c6ca92db60fd_JaffaCakes118
Size

202KB
MD5

d1104e7df24381aa0d19c6ca92db60fd
SHA1

85178e14d6264b0f70955b6c3327454a8c5745a9
SHA256

bc074fba74c2fb16f9a4ca4b95f1290958004624a6a3cbf088366f7ad08cc2fd
SHA512

d56cbe6a4b3f9f6eb31e19ab67aadd074037e4d6d8ddf168cf82e2454e8307b0ac6d146fb048d8cd2bf8d165d55dd1c5aeed7c3ffb453e72d4a503d10816332a
SSDEEP

3072:T0mwxCnPO6r3A95n4sV4B1YwUO/ftnI5WAquQ7u9Z0498sYxbnGaZ7/ZcXI:mCPO9XVS6SQTJH9ubnGc7W4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1104e7df24381aa0d19c6ca92db60fd_JaffaCakes118

Files

d1104e7df24381aa0d19c6ca92db60fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df2643f0176b7398fe1443ca416a5ff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
CharLowerA
LoadBitmapA
LoadCursorA
CreateMenu
LoadKeyboardLayoutA
GetCursor
GetDC

kernel32

LocalReAlloc
GetCurrentThread
GetCommandLineW
LoadLibraryA
GetCurrentProcess
GetCommandLineA
LocalAlloc
VirtualAllocEx

shell32

SHGetFolderPathA
Shell_NotifyIconW
SHGetDesktopFolder

Exports

Exports

_TRgj5Q@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text