e23548107767131624060e3019229ae5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e23548107767131624060e3019229ae5_JaffaCakes118
Size

176KB
MD5

e23548107767131624060e3019229ae5
SHA1

3c3bfb8087a577dcb4b4136825295290f618b2af
SHA256

f0209692490a886bfa07f1d4f9d4111c7dc5823331301081ef6891a1ff644c90
SHA512

8ef1117a0a232b01b811d45df4d4fbeebb5728c99011bed585d27c5eaa6d4a4c453068eaca176612dfe6a54278c4539f5b9659a4ac7dcc8567d9befefe67604c
SSDEEP

3072:6iCVDYkTGan2th5nox6Y3Kujc6tDa4VMj+bbGaQAkg+koo/m:zCV8kTGaKI6XeNiGIkZu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e23548107767131624060e3019229ae5_JaffaCakes118

Files

e23548107767131624060e3019229ae5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bf1419c15ea07b89082dbd0c6a147cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
FindFirstFileA
MapViewOfFile
DuplicateHandle
EnumResourceNamesW
SetEnvironmentVariableW
GetModuleFileNameW
UnmapViewOfFile
FindResourceExA
FindClose

shell32

Shell_NotifyIconA

rpcrt4

NdrComplexArrayFree
UuidCreate

user32

FindWindowA
DestroyMenu
RedrawWindow
CreatePopupMenu
ClipCursor
TrackPopupMenuEx
GetDesktopWindow

winmm

timeEndPeriod

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ