de9acc7704b0d5533d7e24fa233194a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de9acc7704b0d5533d7e24fa233194a6_JaffaCakes118
Size

26KB
MD5

de9acc7704b0d5533d7e24fa233194a6
SHA1

801830a7c449523bf6ccd9999ebe986f2632b2a1
SHA256

278e3fef52902428780d1d9e92bddbfab83499187da0f23d98edeb5537f17355
SHA512

3342eda6e9bc87c96da6251659db8618d7a0ab3c28e4201a7eff03f467d5f4d6bc74577e749556c690d9a311877a45b2ca015e5572e9903d3b58148d91d255ce
SSDEEP

384:pHLWmpQm2zC1z7oTyADl2rMXLe/z6lFqssvvbsOCw6+VgsSB5tpeA42HoTS:pr1Qm2Gz7XOlEM7eul+NjrnSB3pA2v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de9acc7704b0d5533d7e24fa233194a6_JaffaCakes118

Files

de9acc7704b0d5533d7e24fa233194a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d213d434aeeebd200a3625e5a025eb4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnterCriticalSection
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
MapViewOfFile
RtlUnwind
SetLastError

user32

ShowWindow
SetCursor
LoadMenuA
IsCharLowerA
LoadBitmapA
DrawTextA
CreateIconFromResource
CharToOemA
LoadImageA

shell32

SHGetPathFromIDListA
Shell_NotifyIconA
ShellExecuteW
ShellExecuteExW
ShellExecuteA
SHGetMalloc
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA

setupapi

SetupGetInfFileListA
SetupFreeSourceListA
SetupFindNextMatchLineA

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ