555b8f7f01c7743627319dc71ea7386d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

555b8f7f01c7743627319dc71ea7386d_JaffaCakes118
Size

132KB
MD5

555b8f7f01c7743627319dc71ea7386d
SHA1

e3da8b23759f5fad0bfb524d49cde42623ea531c
SHA256

88150dfadeb20a92868b827bb9642a8e1e8f470e8fe485344a8edda3fd46616a
SHA512

aad67c9e097ee2595ac22b1b480031f71e5c967c9170cd6d872c28afd8369686c64ef2f460f0b7df9e7dee21a2864a5a307c918431c5fe40535bd98dd4f8a4ae
SSDEEP

3072:E5SubmCXx6kSy/jyvPMtsPj4BVJm0Glj6jLfF9kn8BWYf:EcVCXYkSx6sPj4BVM0WjuFen8oY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
555b8f7f01c7743627319dc71ea7386d_JaffaCakes118

Files

555b8f7f01c7743627319dc71ea7386d_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE