15fbbf3ece6197ef080d21a367dbdb35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15fbbf3ece6197ef080d21a367dbdb35_JaffaCakes118
Size

132KB
MD5

15fbbf3ece6197ef080d21a367dbdb35
SHA1

6554fbfed796990ad2cd1d4a79f61047495d54b1
SHA256

90d8b556681233bcadc1e49efee7b141158162785a0c745743c6c6323fcb2b56
SHA512

ba32fc2ff72ca6ab0ae34a8ddd735abac36a1b20df59f00616b67096fed02f26a45e40d936a9f9bb446af85d865a87d7b03a5dce62bd55d12049830f8523d450
SSDEEP

3072:i2u6Rm8UAnGUFBrNb7VbQCSk7vVybrrWOJM+sHGtsziRNt:i2uKm8uUFH7VXSbnrWOW+sHGtsz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15fbbf3ece6197ef080d21a367dbdb35_JaffaCakes118

Files

15fbbf3ece6197ef080d21a367dbdb35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE