fe280a061f04b09951f7f3bfd3b8b375_JaffaCakes118 | Triage

Sharing

General

Target

fe280a061f04b09951f7f3bfd3b8b375_JaffaCakes118
Size

102KB
MD5

fe280a061f04b09951f7f3bfd3b8b375
SHA1

c1996832d1d5f7b6bf822283a30c4b479b68a6c0
SHA256

1aecbf889fda4e294b3c1003c5c3a87657c873a733df22e89a1cbf2c802eb3ca
SHA512

ce70351c9d4f815f6b8c26382fd2b89300486d9e864e64d9bf653d5594d9f7c1160b0a0188ae3288117dbae39204165c566d5727d2e8198f441a27adc393bc39
SSDEEP

3072:SA3C84Z8k9Hc3/nl6LAHkzI1UHgEA6II/Y23YU:SQCak96IAmqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe280a061f04b09951f7f3bfd3b8b375_JaffaCakes118

Files

fe280a061f04b09951f7f3bfd3b8b375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c97eec3503cfd5e6a48376e9ae1a4b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

comctl32

ImageList_Create

gdi32

SetBkMode

ole32

CoTaskMemFree

shell32

ShellExecuteA

user32

GetDC

version

VerQueryValueA

Sections

.MPRESS1
Size: 23KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1
.png
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/MANIFEST/1
.xml