13cbf88fce417304a687922f20cf7ce3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13cbf88fce417304a687922f20cf7ce3_JaffaCakes118
Size

109KB
MD5

13cbf88fce417304a687922f20cf7ce3
SHA1

a7b621c29fd75dd3071a228b2ce743cb168ee865
SHA256

5d990cb5e199152807dc5d54514850854b6f6ef81a24b10d3f65525236f65c6d
SHA512

d25a59e493ad75f51fd443e59a2e8f1fa5172ba8c4040392dd4e7c616dd9b4d22bfc115fd455949f6e370da685f4ee3450946747c498f422d8dd0226a3b005bf
SSDEEP

1536:VHAgtnfGErqBrwHGfm1Dx5ADISB4LTdTeIbDXBfC7JhvAfz7z8TGsYGirMAQAlHE:lAgtnzqBcHGfQ7KIt8sVfHz8bbArl+FJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13cbf88fce417304a687922f20cf7ce3_JaffaCakes118

Files

13cbf88fce417304a687922f20cf7ce3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ea93b8538db441eb44838660f59e5fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
FlatSB_SetScrollPos
ImageList_Add
ImageList_Merge
GetEffectiveClientRect

kernel32

CreateProcessW
EnumDateFormatsExW
FindNextChangeNotification
FreeVirtualBuffer
GetCPInfo
GetConsoleFontSize
GetDriveTypeW

Sections

.text
Size: 72KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE