dd89fb3e83972795705e5b0edc08987f_JaffaCakes118 | Triage

Sharing

General

Target

dd89fb3e83972795705e5b0edc08987f_JaffaCakes118
Size

332KB
MD5

dd89fb3e83972795705e5b0edc08987f
SHA1

e315cce36b0494947c5d7b17b62dd38b24b159a6
SHA256

7b7fd96033bb7a8a932758c8f0f1729d800949c2583c03c8aa3d21089cd28a62
SHA512

1d9098f5e7f291ea7d2df3ad497bd7641c5920cbac5e99544a8b7d4b492e956ab051839fabf30bb5207913e7a1df76ec274e6887e47193c866398f2951be7583
SSDEEP

6144:VcMG0Cmis0NH8A3/1uz7uodnIm5KJHLqreJDckzrYk/:WMZas0NcAvAzyQnR5KJHWreJRrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd89fb3e83972795705e5b0edc08987f_JaffaCakes118

Files

dd89fb3e83972795705e5b0edc08987f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e80bb2ba5a5605107e2e82853bd32db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateIconFromResource
SendMessageA
CreateIconFromResourceEx

advapi32

SetNamedSecurityInfoA
GetFileSecurityA
GetTrusteeTypeA
GetTrusteeFormA

version

VerInstallFileA

mpr

WNetGetProviderNameA
WNetDisconnectDialog1A
WNetAddConnectionA

kernel32

MapViewOfFile
GetTimeFormatA
Thread32Next
CreateMutexW

mfc42

ord3738
ord4424
ord1045
ord4080
ord1576
ord561
ord5731
ord3079
ord3825
ord3831
ord3830
ord1046
ord2976
ord3081
ord2985
ord3262
ord1080
ord4465
ord3259
ord1023
ord2982
ord1040
ord5714
ord1029
ord815
ord6375
ord4486
ord1051
ord1059
ord1168
ord3922
ord1089
ord1091
ord2396
ord1018
ord1046
ord5302
ord2725
ord1046
ord1091
ord5307

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ