077aeeeb575efdfc0cd0315e40e8fa66_JaffaCakes118 | Triage

Sharing

General

Target

077aeeeb575efdfc0cd0315e40e8fa66_JaffaCakes118
Size

170KB
MD5

077aeeeb575efdfc0cd0315e40e8fa66
SHA1

cb4a2c430da97e79af45fed1d505744c333d44ce
SHA256

ec4cbb1e28697632ff0c00d258b7b1a2cd484ea75f40e3a4a67a19804bfc31ea
SHA512

952c63c285993119a839f7f67533bbaca273c2ab912f8b049c403a9061bd9546b990005d8451f9795e3d79bf2b3e3c69e26c392692ff8c4779b781892999d382
SSDEEP

3072:bzeWnDkuNCKApyhdGF6CTahNQNT67dIexWZDjHcCep5SqOF:WWnYgRAoc6+Oz7KjDzcNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077aeeeb575efdfc0cd0315e40e8fa66_JaffaCakes118

Files

077aeeeb575efdfc0cd0315e40e8fa66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f244c5595e3a49e08f10fe6bbbe7881

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetLastError
CreateFileW
GetHandleInformation
LoadLibraryW
GlobalFree
GetCurrentProcessId
EnumResourceTypesW
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
UnhandledExceptionFilter
GetModuleHandleW
GetVersionExW

user32

SetCursor
IsWindow
RedrawWindow
EnableWindow
LoadCursorW
ClipCursor
TrackPopupMenuEx
SetWindowPos
DestroyMenu
InvalidateRect
GetDesktopWindow
SetParent
CreatePopupMenu
GetFocus
PtInRect

msvfw32

ICClose
ICOpen
ICSendMessage
ICDecompress

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ