ac223386447c222cff025fc53eaea48f_JaffaCakes118 | Triage

Sharing

General

Target

ac223386447c222cff025fc53eaea48f_JaffaCakes118
Size

201KB
MD5

ac223386447c222cff025fc53eaea48f
SHA1

24369aef9d807a62993d23382c745f31599b102b
SHA256

dc2c1a2ce53792ac392ac6c465bbf77c961327c2ed1d4a3b2bdd43fc16ca0936
SHA512

16f1e9db00520adf769ff52cf2395972402226ee86fcdcfcb5a62c44fbbbb815f299b5b63d428ec6c048e37e951838309bd773e20b10895478e39750dab0a9a3
SSDEEP

3072:dnDvLFT1R1r52xmfQ3qCA+09f5XNfLuQdMaaNY1WBfJ25ZGtMdMwhVD76/CLYJBg:dDvxmxmY3xA5jfqQ+mYJBtt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac223386447c222cff025fc53eaea48f_JaffaCakes118

Files

ac223386447c222cff025fc53eaea48f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

648015df6726d5127d8467ac0888a6d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

user32

GetPriorityClipboardFormat
PhysicalToLogicalPoint
CreateIconFromResource
DrawTextW
FlashWindowEx

oleaut32

VarCyNeg
SystemTimeToVariantTime

advapi32

CryptDestroyKey
QueryUsersOnEncryptedFile

gdi32

StrokePath
CreateCompatibleBitmap

kernel32

IsWow64Process
GetPrivateProfileStringA
GetSystemPowerStatus
GetModuleHandleA
GetConsoleMode
FlsGetValue
GetFileType
GetTapePosition

shlwapi

HashData

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CONST
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.crt2
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ