298a527393d2cbc02dc5825cac6f9206_JaffaCakes118 | Triage

Sharing

General

Target

298a527393d2cbc02dc5825cac6f9206_JaffaCakes118
Size

114KB
MD5

298a527393d2cbc02dc5825cac6f9206
SHA1

5299478b083442ecc1c45eb1332c1bb302e375e4
SHA256

299922aefc57dc45aa1c1126b1d9c214576d7f67d32d2ff7ed329ff1ce7b433d
SHA512

416ff0eff2b4168bff035419c919407e2afcf2c4d00c1344d9a1273f92e9ff3b21af8f64d0918588ce0bd3670a58e30376ed16ce1518b1fef7d481652808ff35
SSDEEP

3072:h5+/Ncejc63iZXSOAqkEO2EDqVjxAKwbNlIxzGY:h5+eeBEiEkEOtD8xAKolIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
298a527393d2cbc02dc5825cac6f9206_JaffaCakes118

Files

298a527393d2cbc02dc5825cac6f9206_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f86156771da29ab6ea2953d8553c00c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowDC

shlwapi

ChrCmpIW

kernel32

GetCurrentDirectoryW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ