100e137d7846a92ad184b65d64d3b63b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

100e137d7846a92ad184b65d64d3b63b_JaffaCakes118
Size

280KB
MD5

100e137d7846a92ad184b65d64d3b63b
SHA1

250c1016b7ddb9232c2dc52771936416632402f1
SHA256

3dfeb10ed115c9917be8653cade2ef7b1d8e0c78f0f7b989efc90a95bba1bebe
SHA512

8d7ea63d22f24ba56e4cc5be4fb4322b8c1971dc9d3d07e92bfcf356c55a41c510884feafbc2d1611b7bd1e6bcae9e5c66825db5aa2fbf0516e739281c38f357
SSDEEP

6144:E2pBM0DSo6r9J3zwvyS0MInpR6oNNftdITq5z3lZ8D:Ealn6r99zNrhzNNfYe78D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Adobe Photoshop CS6 Patch by PainteR/Adobe Photoshop CS6 Patch by PainteR.exe

Files

100e137d7846a92ad184b65d64d3b63b_JaffaCakes118
.zip
Adobe Photoshop CS6 Patch by PainteR/Adobe Photoshop CS6 Patch by PainteR.exe
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ