4179ba3fb4e3d07d9676d05f31bb1082_JaffaCakes118 | Triage

Sharing

General

Target

4179ba3fb4e3d07d9676d05f31bb1082_JaffaCakes118
Size

253KB
MD5

4179ba3fb4e3d07d9676d05f31bb1082
SHA1

332f0e09dbe2b9bbfaee4789040dc526e288404e
SHA256

6f08438d650eb5d72d6b70e97b4a1617db53a8244aa731cc8854340d281a0504
SHA512

9c742b884bf4843577203c7299cc647c62abb5c24bab348da1ad4dfb7f3b4df8aef52cb1586e1cfb3c4bd97d55679c63d4101cd9933eb848386ea7b573f1f868
SSDEEP

3072:9uCBQIJ8McOzuiuopoLUunLiLCFky+ENMZQfoZJeHS7xFm2j7ddFYP:pQ27p0LSWkyf+ZVSy7Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4179ba3fb4e3d07d9676d05f31bb1082_JaffaCakes118

Files

4179ba3fb4e3d07d9676d05f31bb1082_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be3fc92a1069ece62999a28d089f6ddf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetSysColorBrush
EnableWindow
CreatePopupMenu
GetMenu
EnumChildWindows
EndPaint

kernel32

VirtualAlloc
lstrlenA
GetVersionExA
GetTickCount
GetVersion
LoadLibraryA

Exports

Exports

_JQ

Sections

CODE
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eddata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ