15bf5dfdb5bfe95c74a51a48194eee10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15bf5dfdb5bfe95c74a51a48194eee10_JaffaCakes118
Size

136KB
MD5

15bf5dfdb5bfe95c74a51a48194eee10
SHA1

a932c1b0c31c552e9e242a0a1289de9d40b10bac
SHA256

d25fc16e5d4e1feb661f15003d484b59fadc4762747ba1b714587f09592c311b
SHA512

31c344051551bdd8eb97589e198bed8bfbc1015469413384a72fc299ccce4c949c6de04a310da935089f420cde2f4c4bb6706106eb681e1911a1eded3e3d8127
SSDEEP

3072:sFWvIc3oqXirpgG+uoui2ZGL8QPh777jLSbDJixfDoiqv9jENI:sFWv5XAg5uji2ZGLJhLSbuob9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15bf5dfdb5bfe95c74a51a48194eee10_JaffaCakes118

Files

15bf5dfdb5bfe95c74a51a48194eee10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b8b840c1a074d0497cd6a08c90f971ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootW
StrCmpLogicalW
ord155
StrToIntA
StrCmpNIW

kernel32

GetSystemWindowsDirectoryW
lstrlenW

Exports

Exports

?OpenClipIn@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N
?OpenClipOut@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N
?UndoAction@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DSS
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ