db59c501fb284b5393fcd3d606e2a57b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db59c501fb284b5393fcd3d606e2a57b_JaffaCakes118
Size

60KB
MD5

db59c501fb284b5393fcd3d606e2a57b
SHA1

96405ef0e8ba0d8f120a2bd5aad512167ac3be67
SHA256

7b568f57128f2b0c47654cc050051f4094f8ee43063071bab72e7bbf9303332c
SHA512

fa8168ba289e58c3bfcd6154b3ed51ed7ae32e1035946ecfde64f71524a5610cc2ced938b86d0e0e5faf07582032cf67d04c6911fa23a3679e247db7ac5c134e
SSDEEP

1536:Wfs+fo+8Bt/FDljhJsdiNYNJIfoThqkc:WfPfo+UzDltmdgaKfoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db59c501fb284b5393fcd3d606e2a57b_JaffaCakes118

Files

db59c501fb284b5393fcd3d606e2a57b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d523f949c6bb23734195e624c616976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetFileTime
DeleteFileA

user32

InsertMenuA
GetFocus

comctl32

ImageList_GetIcon
ImageList_DrawEx

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ