11305f3778278829195d330597a20e78_JaffaCakes118 | Triage

Sharing

General

Target

11305f3778278829195d330597a20e78_JaffaCakes118
Size

132KB
MD5

11305f3778278829195d330597a20e78
SHA1

87440b46c27b527ba73d608188b8c76041f28b3a
SHA256

b73f7ad8b056cfa81786a44f53f42a5272ac815613793d93c7da4e467de1839a
SHA512

3be6f47fec9f70ac7c1bcfffc1826b8ca436c5ca3736d7073eaab8ad38b8e2b4474d941cec4bd1f2915b9036afa359d853d214a63e0c99a5da49ef55e07fabff
SSDEEP

3072:MT/3v2AgbEqQn+31PWQUECQBZ+Bn8BD7Tslluj/7BJiHO:MT/3v2PwL+RcECqw2Dgoj/VJiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11305f3778278829195d330597a20e78_JaffaCakes118

Files

11305f3778278829195d330597a20e78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE