da143be698c3653a7bb2d984b4203ce9_JaffaCakes118 | Triage

Sharing

General

Target

da143be698c3653a7bb2d984b4203ce9_JaffaCakes118
Size

43KB
MD5

da143be698c3653a7bb2d984b4203ce9
SHA1

9e8c9b9fc4b61bdbe148070a29a17a322004432a
SHA256

b00f94ceab20e887ce750270ce073e4c73d9ef1dfa854f34a7cfd81c2570ce1d
SHA512

05386f68f14cc64f4b1b385ca4f082d7bb370d9122fb4978e7153870db76e8493c6e0718b36d77a061070d1c0fdb86830dedd629c9875f1649fc269e7a4d2651
SSDEEP

768:ZdQIp78ueOl+crUvH/r/w4/2scgk/p4UY8eZWRv7JfLewarV+wYBjZ6EC+9o1rd:Zdh5NovHT/L+scNHiZWRv7lLewU+wYBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da143be698c3653a7bb2d984b4203ce9_JaffaCakes118

Files

da143be698c3653a7bb2d984b4203ce9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb7a4932d1b3c4321b977aac3ceb86b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

Sections

.text
Size: 22KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE