f71eff4541812460cbd4647f890091a5_JaffaCakes118 | Triage

Sharing

General

Target

f71eff4541812460cbd4647f890091a5_JaffaCakes118
Size

165KB
MD5

f71eff4541812460cbd4647f890091a5
SHA1

9fbef5163a7cab38671aa2826bc7972a353766e6
SHA256

7da25f7435201c7a2497b7799256daf5e7f6be785251263e1e1c52dddaea919b
SHA512

3b454776afc3668990b0da85dacfabb1fc6c344175b9ee67ee9fce984eb4ff2070702cc467b3d149467998904d06f20fce9e7040f605880579beac42e44df0e3
SSDEEP

3072:PkulPvC6y5eCb9E4QcFrVfyIbMC/Nq+9tJptwuGAab2A8zdVLL+YPMLO:jHCNbb9m0R6Ibf/NqU13aSA8bqYPM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f71eff4541812460cbd4647f890091a5_JaffaCakes118

Files

f71eff4541812460cbd4647f890091a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0f78a841e8f159513e4102515160638

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBColorTable
SelectPalette
GetBkMode
SetBkColor

kernel32

ExitProcess
GetProcessHeap
LoadLibraryA
GetThreadLocale
GetModuleHandleA
GetModuleFileNameA
VirtualAllocEx
GetProcAddress
GetStartupInfoA

shell32

Shell_NotifyIconA
SHGetFolderPathA

user32

GetSubMenu
GetTopWindow
GetMenu
GetScrollRange
GetSysColor
LoadBitmapA

Exports

Exports

_sxQSPjG
F7dUkU8v08iWM
_BQLoY2Q3m@12
_Fe4sOHHq@12
aS9r9FPcEc2O
4N0tBJ@16
_Sxquw4ZOc6K

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itdata
Size: 512B - Virtual size: 235B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ