JaffaCakes118_d2a6c1de8c0c3d3c3196b61af3e31358 | Triage

Sharing

General

Target

JaffaCakes118_d2a6c1de8c0c3d3c3196b61af3e31358
Size

486KB
MD5

d2a6c1de8c0c3d3c3196b61af3e31358
SHA1

c92a68c79d550af2d0dfe4fbf92bb06e34dd60db
SHA256

6205a84deeaf5dfc8dc0ef4d580782476782b18ba65ac0cfa0bfb1a74cba8d0a
SHA512

3d000821abd4cc9b2cac674b81606b42545c4581991c02bb741be271f14eaf24391b1b7f7b132fd311ff42c1751fb354b83d29c1b4a93128b4e2785ac45815ed
SSDEEP

12288:lXGmEHrlYwbfKdyVVQOq/PENHWmQNso5D7HPTgorhwLb:4mUlJDKW5zWmQNsoh7prc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d2a6c1de8c0c3d3c3196b61af3e31358

Files

JaffaCakes118_d2a6c1de8c0c3d3c3196b61af3e31358
.exe windows:6 windows x86 arch:x86

63ac7c2799723925dd310860701c20d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

GetUserNameA

comctl32

PropertySheet

Sections

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 350KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE