d3509b8c28454693f60b692771e2796a_JaffaCakes118 | Triage

Sharing

General

Target

d3509b8c28454693f60b692771e2796a_JaffaCakes118
Size

123KB
MD5

d3509b8c28454693f60b692771e2796a
SHA1

8b879aa8e798a29fdb6b5dd590620bbb0fb01015
SHA256

a7da044647381c13640683d9b16a1ac6661123dff82823d5711cefc6dab428e8
SHA512

9d559586f076c60352f37f2c2c3d3a0b1e17ed65c0970cc80be73bb3286f96ed4febf3e1c40834370c64335d2a9a72a9dd076718dee8f7484ff0fec10053859c
SSDEEP

3072:c9Tr+p62LZsB+ticBeo6d/rbkVWYaft1LZH4U7wWYKSLtw:IGp5PsaJ6dnbxft11Hl0WYKS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3509b8c28454693f60b692771e2796a_JaffaCakes118

Files

d3509b8c28454693f60b692771e2796a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd4d62a4c5bbb103eb3ff880ebd7d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_EnableScrollBar
MakeDragList
ImageList_Create
ImageList_Merge
ShowHideMenuCtl
ImageList_GetIcon

gdi32

CreateHatchBrush
DeleteColorSpace
EndDoc
EnumFontsA

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE