JaffaCakes118_793f365a3221c67b0399b132ba1dbf16 | Triage

Sharing

General

Target

JaffaCakes118_793f365a3221c67b0399b132ba1dbf16
Size

176KB
MD5

793f365a3221c67b0399b132ba1dbf16
SHA1

54cd106498717c71cc796ad9d30ec9ec81803333
SHA256

daa4921943b0246c9ac158ff8abf2ec6a04b0b46734cdbb1eb063f326d7e040d
SHA512

d7b7196506d605af5441c5ab14b87a48ca1f05d69eec1acb19be40c6cbb7326504c504853e56bf30e840cb1374f11011c13b641ab9becdd89224a3d7fa79e076
SSDEEP

3072:j1YGVOUOmGWweuWaYneGV5qSfoWtyMUtq8kMYZbSbdtiSUU8fE3k55V8aW415cTI:smGWweuWrneGXfoWhUtXmbSJVJiKaWoC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_793f365a3221c67b0399b132ba1dbf16

Files

JaffaCakes118_793f365a3221c67b0399b132ba1dbf16
.exe windows:4 windows x86 arch:x86

4fa40b76649ce9f66a49a0d4054f9284

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
FindResourceExA
UnmapViewOfFile
DuplicateHandle
EnumResourceNamesW
SetEnvironmentVariableW
GetModuleFileNameW
MapViewOfFile
FindFirstFileA
FindClose

winmm

timeEndPeriod

shell32

Shell_NotifyIconA

user32

TrackPopupMenuEx
ClipCursor
CreatePopupMenu
DestroyMenu
RedrawWindow
FindWindowA
GetDesktopWindow

rpcrt4

NdrFixedArrayFree
UuidCreate

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ