d2936cdbc8dc3993750e3bb585fd3572_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2936cdbc8dc3993750e3bb585fd3572_JaffaCakes118
Size

5KB
MD5

d2936cdbc8dc3993750e3bb585fd3572
SHA1

6e608f5bf658f7d000b8386bb4c593f2e7bd2ae3
SHA256

572209c9031aa43b86fe7ae4a923ae627d6e47926ee4d9a965a226444bcfdd92
SHA512

3d0e996ce8117d00fa96a802d50894b81f20539f28ce0f9d9eadff80ec735988aeda0983c823841e55fe364463f4ccc970699a76f6b377d624b765a7574e9135
SSDEEP

96:jchGLVEUodO2JNGQ1RAf7SB2u+dLVr3U4rOYq8CMf6BLzQuZ/Ro7Ja+q:YAEhw2SoWGo7VzU4rOYqAfEL8udilq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2936cdbc8dc3993750e3bb585fd3572_JaffaCakes118

Files

d2936cdbc8dc3993750e3bb585fd3572_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf137fa0c6ffbf9d5aa0e94094a867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

RealShellExecuteA
DragQueryFileW
DragQueryFileA
ExtractIconW

comctl32

ImageList_Duplicate
ImageList_Merge
MakeDragList
MenuHelp

ntdll

CsrNewThread
DbgUiRemoteBreakin
LdrAccessResource
LdrEnumResources
LdrGetDllHandleEx

kernel32

CloseHandle
CreateFileA
GetPriorityClass
WriteFile

Sections

.text
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE