f6176f4e29e6b34a5a3efb73539b7b05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6176f4e29e6b34a5a3efb73539b7b05_JaffaCakes118
Size

109KB
MD5

f6176f4e29e6b34a5a3efb73539b7b05
SHA1

bd564735587b53a00f46420c56bbc39eaae8bfde
SHA256

bb325cb073eed78ad6ebd92d4b2cce1a1aefb66d96d4add3fc7cad9a254518c1
SHA512

6b3123a3337ca22de801074aec87df5588982f8bea47cf7004977a8c591f3fce3841ba35bd75d9d58d4753922d582b0add12fdcc9e9ef70f88db04055c53b9d1
SSDEEP

1536:lrVe6ETu1nJvGXP+SykbD+SU2Ulm7i649//eK+AV2Zw7RSTpr2:lrwJTKJvGXWS1bSSQlm7fY19o2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6176f4e29e6b34a5a3efb73539b7b05_JaffaCakes118

Files

f6176f4e29e6b34a5a3efb73539b7b05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53e266e484ef3774f3c80a61371adcab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DllGetClassObject
ExtractIconEx
SHGetFileInfoA
SHHelpShortcuts_RunDLL

user32

CloseClipboard
CreateDialogParamW
GetKeyboardLayout
InvalidateRect

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tedata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE