eac0828117663e06a417ee611bbbc0d7_JaffaCakes118 | Triage

Sharing

General

Target

eac0828117663e06a417ee611bbbc0d7_JaffaCakes118
Size

136KB
MD5

eac0828117663e06a417ee611bbbc0d7
SHA1

71511cf18e2bef83e90ca52a001b7e206a60741c
SHA256

58cd4cc868bef38a650a3ec3d0be0b86b5ac7b0ecae24b0fe6bd99188802fa8a
SHA512

5d4c3617480904b08a649261ffdef9db2188259c658186eb5d2f90494ecc182638679a98d025e63dabdb3089a34d6b2872fe19eccc00bee40c7dc15c5e1e9c3f
SSDEEP

3072:GozrS5Wr9vBCc0OOmVHEJdq9AXNliWik7chwze91:PS09vBLrVkJdqw1zFeL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac0828117663e06a417ee611bbbc0d7_JaffaCakes118

Files

eac0828117663e06a417ee611bbbc0d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8352306dd5924ff2ad04d54deae185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetDesktopFolder

kernel32

ReadFile
LoadLibraryA
ExitProcess
VirtualAlloc
RaiseException

user32

EnableWindow
LoadIconA
GetWindowTextLengthA
GetCursor
GetActiveWindow
GetMenuItemCount
GetWindowLongA
GetWindowDC
GetDC
GetTopWindow
GetWindow

Exports

Exports

BTHRp8

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text