430c41fc284244ab61a11c3f97cadb72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

430c41fc284244ab61a11c3f97cadb72_JaffaCakes118
Size

120KB
MD5

430c41fc284244ab61a11c3f97cadb72
SHA1

68575d0fc1c9905007b40bfcbfaeeb061e6f08f8
SHA256

d9c674391e0584117aae7c7bfc59ec704a5cd76b2bd84622833c801ad89bb2fc
SHA512

93ab03bf58d5dd0addc1b3385d1fe90818f12cc2e3b03f30ce24c94c56a3eda889e88a6318fed8432fbf84a2c8ce292506fc1f52601b9ff05b73ce98a7e58e34
SSDEEP

3072:OtRC/h8MnaLbQzoIZfyk5LGcRtX73l3o:BaL4VykRVj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430c41fc284244ab61a11c3f97cadb72_JaffaCakes118

Files

430c41fc284244ab61a11c3f97cadb72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e46b1eef277e8d346c6ccb94173645b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
VirtualAllocEx
FindResourceA
LoadLibraryA
ExitProcess
FindFirstFileA
GetOEMCP

shell32

Shell_NotifyIconW

user32

CreateMenu
DrawMenuBar
CharUpperA
ChildWindowFromPoint
CharLowerA
IsWindowEnabled
IsChild
CloseClipboard
CreateIcon
GetWindow
CreatePopupMenu

Exports

Exports

_r39f49ab

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text