562d003bbea1a8c1027997f1f1161934_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

562d003bbea1a8c1027997f1f1161934_JaffaCakes118
Size

184KB
MD5

562d003bbea1a8c1027997f1f1161934
SHA1

32fda230901ceea25e9342a0980d4e0a147d3751
SHA256

e14c655b3a017819f14ae6bd5adc2a17eb899a6db7fa5d0315d514f412b8fb0c
SHA512

16a41591fb24a4ed83219c3189b62fa9dda9c1209c90c149d58c155b53a44ce7d18e653697feeae81ab41a4f000d5060804f2fe9d0861da5ce0770e74a968f91
SSDEEP

3072:zu3MpD6NABxL56Vh45wZr82kbAzZo2vo7nN5e9Q+iPCiQKwqGR3yyu7lYcF5Ok8E:PBEABxVlqZrCby1mNKdiXz+VuGm52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
562d003bbea1a8c1027997f1f1161934_JaffaCakes118

Files

562d003bbea1a8c1027997f1f1161934_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e47e1b6daf6b136aa89afd2e63f5ddf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow

kernel32

GetCurrentDirectoryW

shlwapi

PathIsContentTypeW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

net3e
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net1e
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net5e
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net4e
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net2e
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ