020ba267343163c76ca4b19bd99a13d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

020ba267343163c76ca4b19bd99a13d8_JaffaCakes118
Size

132KB
MD5

020ba267343163c76ca4b19bd99a13d8
SHA1

a333f6ec0afe09f8bcf66cabe0478c4e87c52365
SHA256

9045ef9183fcce048aace0a12bdbf2e8bcfe4126d0e496f41f081dceac62c213
SHA512

e23c15a5f7352757447419bb5e1e093869afd419096164e801ec167b9f2903134e07b3ca81456e7d880d25338af659528961696ef5f110706e2ea116d613ac30
SSDEEP

3072:jykneBbxeiidwb7WO7Uvla/JbesSJctTKl9BrgHaDSW/2q:j7eBbxBJfQsIctTKLZgHaz/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020ba267343163c76ca4b19bd99a13d8_JaffaCakes118

Files

020ba267343163c76ca4b19bd99a13d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e296eab390eef587bfe1989f1e6886b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PrintDlgExW
dwOKSubclass
ReplaceTextW
ChooseColorA
PrintDlgA

shell32

Options_RunDLL
ExtractIconW
SHBrowseForFolder
SHFileOperationA
ExtractIconA

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE