1599dd527aee13e9bd66fcad2494817b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1599dd527aee13e9bd66fcad2494817b_JaffaCakes118
Size

148KB
MD5

1599dd527aee13e9bd66fcad2494817b
SHA1

cdf69a79cf93c1fcb49c88ffb6e4ea3dc8a768b6
SHA256

a0b93658890ab4899d2c9b3aeb0d148dd81769944003564da02604ce8e9508fb
SHA512

26ccd1c1f781c407f4c8e65450dd98ae2d5c60813aaea564e226e080e4d75146825ec14b3c6b28288564409d672db0cd59db5b84a5013bdcd149743244075d99
SSDEEP

3072:pLXice/bH2myH5J2XwV51EVQU9seZ0SlS+M09iahuMcrmhUl:ZSce/D2mA5Jd309ZZ0G6hMca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1599dd527aee13e9bd66fcad2494817b_JaffaCakes118

Files

1599dd527aee13e9bd66fcad2494817b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04c9dad1102153696a563b0724502821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

Sections

.flat
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 90KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE