ed51777d92665bb45ac892160984cd5c_JaffaCakes118 | Triage

Sharing

General

Target

ed51777d92665bb45ac892160984cd5c_JaffaCakes118
Size

164KB
MD5

ed51777d92665bb45ac892160984cd5c
SHA1

223f0ac840afdfa4bde34cbfbe0d362d9fa91fe6
SHA256

3fa4297a33559e7a7c5676bd3f955a38148ee5820e58ed3cf13483ae5ed4abd7
SHA512

721b0503e23ea81943d4ba8b46f9dc0c606c0ad724a10015039841b02821fd8de646cad555202f7e328244aecb5f11cd6722d8e45193b6122dbd2f122ca0e51d
SSDEEP

3072:ktOmSp7U9vDIZ0/zR8nLlnEXz83L60aaHm+gPMWZdvb:f+v6c6LlnEXE/g0gv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed51777d92665bb45ac892160984cd5c_JaffaCakes118

Files

ed51777d92665bb45ac892160984cd5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bfde4db73efaf61b218badd8c2ae634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
GlobalGetAtomNameW
VirtualAlloc
HeapSize
TlsAlloc
SetStdHandle
GetLocaleInfoA
GetOEMCP
SetFilePointer
GetConsoleOutputCP
GetACP
GetCPInfo
EnumResourceTypesA
HeapReAlloc
SetThreadExecutionState
RtlUnwind
IsValidCodePage
GetDateFormatA
MultiByteToWideChar
WriteConsoleA
TlsGetValue
TlsSetValue
RaiseException

rpcrt4

RpcStringFreeA

shell32

SHGetDataFromIDListW
SHGetPathFromIDListA
DragAcceptFiles
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ