102865aa7d7b1f06738959f5f2c98504_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

102865aa7d7b1f06738959f5f2c98504_JaffaCakes118
Size

132KB
MD5

102865aa7d7b1f06738959f5f2c98504
SHA1

77adcbfb3e314163af6a829461565916f88268c8
SHA256

f73c2c727fcb124ba752cc1248f6f91dfc5d12004aeab3d7bdfef4db1c4f4fc6
SHA512

4cb8f9d4f8c84e540c39b5b0bdafca9619a89086befc3c1ee2865b3340718240bbf1b493f7354c89e9b828a72bd82a0eb2eaf5080fa6e8affe86b0f25edb4452
SSDEEP

3072:AbbRBf02jaDqyoen6Xo06DF5Bi6nRbbmyQYxU94ZBw/Nc:APD02jaD5n06jg6nR+88N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102865aa7d7b1f06738959f5f2c98504_JaffaCakes118

Files

102865aa7d7b1f06738959f5f2c98504_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8055ba775ca6b6c6b5b0c0ae8ed352f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Options_RunDLL
ExtractIconW
SHBrowseForFolder
SHFileOperationA
ExtractIconA

comdlg32

PrintDlgExW
dwOKSubclass
ReplaceTextW
ChooseColorA
PrintDlgA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE