015567c269a8eefdc7742fa450c5f3c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

015567c269a8eefdc7742fa450c5f3c3_JaffaCakes118
Size

170KB
MD5

015567c269a8eefdc7742fa450c5f3c3
SHA1

071e635caa6c01d791910fa725178c842952b88a
SHA256

61cff158bd70a1a72c1b25a33f30f2314e5ef19bc907032bc4f34f2fe687bcc1
SHA512

45e7bab30fa783007c87ff686440c1617e130763b38fcc17dc220b03105b8d0f237bade86e2e170d61fd982774a50b6b4908b8a5870a11a804fb0e0b6154a7d6
SSDEEP

3072:bzeWnDkuNCKApyhdGF6CTahNQNT67dIexWZDjHcCep5SqOF:WWnYgRAoc6+Oz7KjDzcNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
015567c269a8eefdc7742fa450c5f3c3_JaffaCakes118

Files

015567c269a8eefdc7742fa450c5f3c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f244c5595e3a49e08f10fe6bbbe7881

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetLastError
CreateFileW
GetHandleInformation
LoadLibraryW
GlobalFree
GetCurrentProcessId
EnumResourceTypesW
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
UnhandledExceptionFilter
GetModuleHandleW
GetVersionExW

user32

SetCursor
IsWindow
RedrawWindow
EnableWindow
LoadCursorW
ClipCursor
TrackPopupMenuEx
SetWindowPos
DestroyMenu
InvalidateRect
GetDesktopWindow
SetParent
CreatePopupMenu
GetFocus
PtInRect

msvfw32

ICClose
ICOpen
ICSendMessage
ICDecompress

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ