f583af0d0edf526f7193c730ec90e8e7_JaffaCakes118 | Triage

Sharing

General

Target

f583af0d0edf526f7193c730ec90e8e7_JaffaCakes118
Size

181KB
MD5

f583af0d0edf526f7193c730ec90e8e7
SHA1

88785c5e23726762fb3be19957ad44de9902b71c
SHA256

e2d02f56474f24a255c62ba5d23bfb9fbd9c05f421b2f6c3367ea16e82585a53
SHA512

8db54fe2f78ed6e9c38989e45d4edc893414ed75fd2e1de3b0ada735e9bce1de86a78229eaa31e715aa991f6fc898768abfee690165e43135f5090cf472390b0
SSDEEP

3072:3+v3HUVBjoAnn5ccD6OW6idPwHr5uib8hB9CRHoP5FE7PLs/6bFmp7ASf7:3+v30VBECjdoW8g8TqoqLvbFy0SD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f583af0d0edf526f7193c730ec90e8e7_JaffaCakes118

Files

f583af0d0edf526f7193c730ec90e8e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

319c971acbf43cfe0be45c1524033309

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
WritePrivateProfileStringW
GlobalGetAtomNameA
LockResource
GetPrivateProfileIntW
MultiByteToWideChar
GetTickCount
GetVersionExA
LoadLibraryA
FreeLibrary
GetPrivateProfileStringW
GetModuleFileNameW
FindFirstFileW
GetProcAddress
GetModuleHandleW
EnumResourceTypesA
GlobalSize
InitializeCriticalSection
FindClose
GetVersionExW
GetDllDirectoryW
lstrlenW
Sleep
LoadResource
DeleteCriticalSection
MulDiv
GetLocaleInfoW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

shell32

DllGetVersion
ShellExecuteExW
SHFileOperationW
SHGetFolderPathW
SHGetFileInfoA
ShellExecuteExA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteW
CommandLineToArgvW
Shell_NotifyIconA

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ