f272ff1987086ef12b23c04da79dfb9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f272ff1987086ef12b23c04da79dfb9e_JaffaCakes118
Size

47KB
MD5

f272ff1987086ef12b23c04da79dfb9e
SHA1

416a103625791510bbf19559c96d0614f438fab4
SHA256

c1872fae9b4aeacb568ab3af10cbc4a8df483e749e6f78a2a3f47217d178b891
SHA512

84d47757ee130725ae82b0295ee35d79c414d304a885f9f97a951c78a4d863d4abb4e768d64574b3e7d082e28dcaa275175fb02845a0fa7dc13e172f55dfac96
SSDEEP

768:5u1CvJWBUNnUrVOWLIgh7QNVity4YF6uTsA0luzzUxjCXQIeLM:o1eJvnHgJQNVit/4rJ0kIAje4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f272ff1987086ef12b23c04da79dfb9e_JaffaCakes118

Files

f272ff1987086ef12b23c04da79dfb9e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b998ed24ba383b1e29f93fe4185704a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
DisconnectNamedPipe
GetFileAttributesW
VirtualAlloc
GetShortPathNameA
RemoveDirectoryW
CreatePipe
GetTempFileNameA
GetDiskFreeSpaceW
SetCurrentDirectoryA
InitializeCriticalSection

user32

MonitorFromPoint
ClientToScreen
GetPropW
LoadCursorA
keybd_event
GetKeyboardType
CreateDialogIndirectParamW

gdi32

CreatePalette
SetDIBits
CreateDCW
GetObjectA
FillPath

advapi32

RegCreateKeyExA

comdlg32

GetSaveFileNameW
GetFileTitleW
ChooseFontA
PrintDlgExW
FindTextW

shell32

StrCmpNA

ole32

OleCreateEx
CLSIDFromProgID

version

VerInstallFileA
GetFileVersionInfoSizeW
VerLanguageNameA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ