d59b0b0c48e1b577032e27e72b66d31d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d59b0b0c48e1b577032e27e72b66d31d_JaffaCakes118
Size

6KB
MD5

d59b0b0c48e1b577032e27e72b66d31d
SHA1

6071e33738482296020e7698377c853ef5f1086c
SHA256

349cd7ebf578545a44f91ccfbbcc9380ca0b7a617858d71c0e4877686f564dfd
SHA512

7d57f9c4e909e277229e5ae98f90c606a8683d3b4f4a06d4a68b9e693b4730e2d0273420d473afb2546e3425620c6cc240380dd5cdaa54bbca9fb78e83b714b5
SSDEEP

192:wwuoF+M7eLI9dYzc0iPGfHJP+ey4jy9CQtUSskYlHFJLfA7+:JuocM7OVY1PsLkYVFJLYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d59b0b0c48e1b577032e27e72b66d31d_JaffaCakes118

Files

d59b0b0c48e1b577032e27e72b66d31d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f9b7f3d6bb1c46d691366acac846a191

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_LoadImageW
ImageList_Write
CreateStatusWindowW
ImageList_DrawEx

ntdll

LdrLockLoaderLock
LdrSetDllManifestProber
LdrShutdownThread
NtAlertThread
NtClearEvent

shell32

SHLoadInProc
DragQueryFileW
ShellAboutA
ShellHookProc

kernel32

DeleteFileW
CreateMutexW
WriteTapemark
CreateFileW

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 4B - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE