279cbe56d381f3d46b57f0e93fbb02da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

279cbe56d381f3d46b57f0e93fbb02da_JaffaCakes118
Size

110KB
MD5

279cbe56d381f3d46b57f0e93fbb02da
SHA1

82cd850045e1c2dca1cce24080646162230780c1
SHA256

b88a43d486f586b6bfd45e2bf719cf262d9fd9005d8a662f6ee838161c130a14
SHA512

7b02cb3a15c31b1c1464a4dcb48f68f0db8caf0b93e3daea833ebfe3acc4f0cc895c6b5c26ee51f87b802ab7dad0d6b779b2da33d4f422e93ae10a6ea077dc8b
SSDEEP

3072:aUzjus+Z87TyxWcQoKG9nS4s5IlL4KTLx6G:aUzjuZIh/3+O1G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279cbe56d381f3d46b57f0e93fbb02da_JaffaCakes118

Files

279cbe56d381f3d46b57f0e93fbb02da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ea93b8538db441eb44838660f59e5fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
FlatSB_SetScrollPos
ImageList_Add
ImageList_Merge
GetEffectiveClientRect

kernel32

CreateProcessW
EnumDateFormatsExW
FindNextChangeNotification
FreeVirtualBuffer
GetCPInfo
GetConsoleFontSize
GetDriveTypeW

Sections

.text
Size: 72KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE