d73604c4cc118a5ca0c8acb82d7d189f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d73604c4cc118a5ca0c8acb82d7d189f_JaffaCakes118
Size

420KB
MD5

d73604c4cc118a5ca0c8acb82d7d189f
SHA1

152444523cba2e53ba752c89b58a3dfd7f60322e
SHA256

4337309fd814028929e4b3c1e58f62cf332aefb68f39762c7625ef991f0ca1c6
SHA512

430d7ac0c0e27866f4dbfc8204093ebabdb17508f5c05da93431909bbada0c618544d0ff197db87d8c861dff4ec99afc8d0982baf7dc70d62d4ef20ae641add7
SSDEEP

6144:iJlnLiSfOqz3uU7tYcFYL0NtSGPl26iya/iO5AmT8O2u7Oe03mijeX+3KwQH:iJhGO3X7tYcttSMllsH516+y1jeYKw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d73604c4cc118a5ca0c8acb82d7d189f_JaffaCakes118

Files

d73604c4cc118a5ca0c8acb82d7d189f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

240890a13eaae031279b53a7c8064a56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA
PathAddExtensionA

kernel32

LoadLibraryA
VirtualProtect
CreateFileA
ExitProcess
GetProcAddress
VirtualFree
VirtualAlloc

user32

GetMessageA
GetForegroundWindow
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 412KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ