3a797bdbd22be056ff911643377011a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a797bdbd22be056ff911643377011a0_JaffaCakes118
Size

15KB
MD5

3a797bdbd22be056ff911643377011a0
SHA1

4119530fb302c2cf656ea091f031f3952cc74745
SHA256

e41c8cc9c7e6e014d52dff01aababea6c1e9127f9d8bafaefa028673fca48276
SHA512

279bcd5fe63723e40c616ecb574ed20f9feefa94ea62dca255f42ceba608eea7c9b49a8fb72eebc135ff04a566839f3376bda6181d15f0c82069d7b9a34e7b7e
SSDEEP

384:aMSsJi2DIbaXa29XCz0I5vq4+U7O+MmpOY5Gey7s/6HYA:91QSIbR2+vy26w/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a797bdbd22be056ff911643377011a0_JaffaCakes118

Files

3a797bdbd22be056ff911643377011a0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ffdf137fa0c6ffbf9d5aa0e94094a867

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

RealShellExecuteA
DragQueryFileW
DragQueryFileA
ExtractIconW

comctl32

ImageList_Duplicate
ImageList_Merge
MakeDragList
MenuHelp

ntdll

CsrNewThread
DbgUiRemoteBreakin
LdrAccessResource
LdrEnumResources
LdrGetDllHandleEx

kernel32

CloseHandle
CreateFileA
GetPriorityClass
WriteFile

Sections

.text
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 4B - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE