383e704994a01a9aa5f3a9594cfd1e33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

383e704994a01a9aa5f3a9594cfd1e33_JaffaCakes118
Size

132KB
MD5

383e704994a01a9aa5f3a9594cfd1e33
SHA1

573f6e10f79c040245457446995bec4741a40754
SHA256

0995ad7d000d90422a776beb4eb11c136860c4b3d54ccc71b9411c1f9b0f372f
SHA512

c12ad4b84735563ca639382de9955b26596dfd4cea4b232c3fe16434f6a88bb76106bc59b5cbef68e6c1cd4cff0e10952586bb28e804660b858bb185bab53233
SSDEEP

3072:gUeKElWub1Nihiz4Pimmy6a7vAsvQHy7VvRPqvRtc4XwAff7cm:BJ0lbgPimmywSNRCvXTwSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
383e704994a01a9aa5f3a9594cfd1e33_JaffaCakes118

Files

383e704994a01a9aa5f3a9594cfd1e33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8055ba775ca6b6c6b5b0c0ae8ed352f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Options_RunDLL
ExtractIconW
SHBrowseForFolder
SHFileOperationA
ExtractIconA

comdlg32

PrintDlgExW
dwOKSubclass
ReplaceTextW
ChooseColorA
PrintDlgA

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE