f6bf2e074c525e83937125c8ef98a813_JaffaCakes118 | Triage

Sharing

General

Target

f6bf2e074c525e83937125c8ef98a813_JaffaCakes118
Size

305KB
MD5

f6bf2e074c525e83937125c8ef98a813
SHA1

2583dea825de22e21b80fbacf7f3d7a310f1cc90
SHA256

6755a9dc507342ef1833bd74d904d341e8a79eaaba8e97ffd7d6adf6bd63b6d9
SHA512

8af3d5382ef34c71bf750af6c918c075ba008f7fd09d4dde43ca4f9a83188968834557341e567aaa9b906fd795215ca10c48e37164efe0b114bd1c016334ff77
SSDEEP

768:m1ODz9SyzZDLesT7fC161QtfKFToa7DDgAocpPDGq/0b2iZAAm6kRRo+aDeJRnQ:+EBDzZDLdfG61Q4FkwgCRL/0bLWAMmV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6bf2e074c525e83937125c8ef98a813_JaffaCakes118

Files

f6bf2e074c525e83937125c8ef98a813_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60858c22ebb3b03e9278c6ade19598c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

ShellExecuteA

advapi32

RegCloseKey

comctl32

ord17

ole32

OleInitialize

Sections

.MPRESS1
Size: 17KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/ICON/7.ico
.rsrc/MANIFEST/1
.xml