d414847ba08ee7942559412c790bd9fa_JaffaCakes118 | Triage

Sharing

General

Target

d414847ba08ee7942559412c790bd9fa_JaffaCakes118
Size

58KB
MD5

d414847ba08ee7942559412c790bd9fa
SHA1

770c0f3855511d385c5ae4cd16c325a8cc005baa
SHA256

b77651c3035a6d40fbda2a0255d7f45e1d7c5fd08d3e1741dde5eef4e36011a7
SHA512

ab25c779f27d833ec44a093f3fe96221837213f7d1f660eb65f1dddd5f6714fb3d86000918ce2c4dfa0edfa11c3e13b22a34ac257c4c72cff8f82ed790f821f7
SSDEEP

1536:/Yyowjw3mX/lmxp+KcDHvdVSwpcn3wiGkc:gyD83mtmxQxPCwk3D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d414847ba08ee7942559412c790bd9fa_JaffaCakes118

Files

d414847ba08ee7942559412c790bd9fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33047becb62fc71840ec3d82b7d13393

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GetStdHandle
DeleteAtom
GetCPInfo

user32

DrawIcon
CopyIcon
LoadCursorA

comctl32

ImageList_AddIcon
ImageList_GetIcon

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ