175cfa06cb702f209e9d0c28c7b666ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

175cfa06cb702f209e9d0c28c7b666ff_JaffaCakes118
Size

183KB
MD5

175cfa06cb702f209e9d0c28c7b666ff
SHA1

914a9a56680bae51fbd43b2a9edffa784dd50e71
SHA256

cfaee0783f57ac18fbe433fb5cf9b39692b2945a47317b4fefefce63e877193f
SHA512

b4fd31b2a64a54609634f5b3e31d5d1c45dbc1b97b7e07578c134506a2eaeed1e312e58890aa0c2229c4c4e47ca70037b57c0706263075c339e1da526e4bbe1c
SSDEEP

3072:W5+/Ncenef+X8ib6oioUsyeUHNRsnyqxCZCiLFMrod0Pp5IxQIIhJpS:W5+eeef+s+7Uvtmn2ZC6Mrod0R5IxQIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
175cfa06cb702f209e9d0c28c7b666ff_JaffaCakes118

Files

175cfa06cb702f209e9d0c28c7b666ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f86156771da29ab6ea2953d8553c00c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowDC

shlwapi

ChrCmpIW

kernel32

GetCurrentDirectoryW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ