03ddace21e0a2550f34008985f8f9565_JaffaCakes118 | Triage

Sharing

General

Target

03ddace21e0a2550f34008985f8f9565_JaffaCakes118
Size

64KB
MD5

03ddace21e0a2550f34008985f8f9565
SHA1

8d1a9d166b12b370f07e7516371fe70d52a19a09
SHA256

e3c7207f4ab2aa363e7af6353dfb7d072b06092faf32c5dfcadede680086974c
SHA512

2f5c271e60d0a4e177a2459f5bc093af478196ec0c2d74115158a91d7a7d44dfa92b264ff7cef938fe1dba6470b3095cd4686d6c82cdc910d92690b6cf6b5705
SSDEEP

1536:cFgb9uGXZjbv7VxwrKu+4xlB5NG/Hkd4W13D7NS07uh:SgZu+7Vxoj+43M/Ed4WdD7Nj7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03ddace21e0a2550f34008985f8f9565_JaffaCakes118

Files

03ddace21e0a2550f34008985f8f9565_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5bdc41c6e791e5dfadb53454999bd37c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA

user32

RegisterClassA
LoadIconW

shlwapi

StrCmpNIW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DER
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ