1c2e06d10cb4c71b42ef5a9a6636d36e_JaffaCakes118 | Triage

Sharing

General

Target

1c2e06d10cb4c71b42ef5a9a6636d36e_JaffaCakes118
Size

155KB
MD5

1c2e06d10cb4c71b42ef5a9a6636d36e
SHA1

76996f27484fb060841e4be70fdc5ebe8dd3dd56
SHA256

3687b93e3ae961dea1dc491d5cfd2b50852f85aaccf9c90de426cf745ef19d28
SHA512

1ea250c2c0a6e333629338e02a435458613973ffdd1e6774939a3db2454516302513fc194eacfca94d5a759c1ee535b1d277e896c2e0b8108c67d9d0761bcebd
SSDEEP

3072:5hPPXDsqYl/7kOXKoiEMwxXPQLyoAmkfkO8YO/m5GVwYLw:5ZDsqm7kuK7EMwayFmwk7Y/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c2e06d10cb4c71b42ef5a9a6636d36e_JaffaCakes118

Files

1c2e06d10cb4c71b42ef5a9a6636d36e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed7cc5ea8d82f7bd4cee65044b4232c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetMessageW
GetDC
SendMessageW
wsprintfW
CharNextW
CharUpperW
SetTimer
KillTimer
PostThreadMessageW
DispatchMessageW
TranslateMessage
UnregisterClassA

kernel32

LockResource
lstrcpyW
lstrlenW
MultiByteToWideChar
GetACP
CheckRemoteDebuggerPresent
WideCharToMultiByte
OutputDebugStringW
lstrcpyW
GlobalFree
EnumResourceTypesA
GetCPInfo
FindClose
GetTickCount
lstrcmpiW
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
GlobalAlloc
GetLastError
GetModuleHandleW

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ