e110fff1e492bdf998774dc3a0ef620f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e110fff1e492bdf998774dc3a0ef620f_JaffaCakes118
Size

127KB
MD5

e110fff1e492bdf998774dc3a0ef620f
SHA1

8ac4f8c494076bc776ae1f82c541828aeae82a12
SHA256

6648aee26c0096512adc08f198455b80c7d6dcbc7976314a031f849e2f5eaa75
SHA512

478ebeb65e3197d23038604ebd861a75d08badd9128113b5e76f538f06afaa369481bbab3fbfa67b6b745aca4d15c92675e4c8857d0917f90cbf13548e87d67b
SSDEEP

3072:7hJNyFL3xs5Br+tbTVFptLQHUPsvvfEVI/a49nqZpdMN:9zELhsitbbbLQHUUvfEVIR9qrdG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e110fff1e492bdf998774dc3a0ef620f_JaffaCakes118

Files

e110fff1e492bdf998774dc3a0ef620f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39954bec757358dcb6fffd04e5776198

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
VirtualAlloc
ExitProcess
lstrcmpiA
LoadLibraryA
lstrlenA

shell32

SHGetFolderPathA
Shell_NotifyIconW

user32

SetScrollInfo
IsWindowUnicode
SetParent
IsChild
LoadCursorA
OpenIcon
GetDC
GetTopWindow
GetSysColorBrush
GetWindow

Exports

Exports

_7eGnUH@20

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text