267c5ec0dc0ae58cda4763c48fea5223_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

267c5ec0dc0ae58cda4763c48fea5223_JaffaCakes118
Size

354KB
MD5

267c5ec0dc0ae58cda4763c48fea5223
SHA1

a281d42e9917b71603ae158e4a9b8bbcd5623a49
SHA256

83086d984abc17fe727bc56fcfd9d871884d6e2ed15155180c782c5f5486e282
SHA512

ad79e68c080aa59c3d051e6aae177fd1de22aa003007d242824ada86c6b5bb611c2cd4e481ab25981092dfff7c1d4eb53774a27af3001c2d4906cf1924278bd9
SSDEEP

6144:xquM1cVBaCOFfdI6o81uQdIoxxPzidfbNrCQexxF1TuMzUT5EtyL:4Isz9dI6o889oxxPUbNrxwABT5s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
267c5ec0dc0ae58cda4763c48fea5223_JaffaCakes118

Files

267c5ec0dc0ae58cda4763c48fea5223_JaffaCakes118
.exe windows:5 windows x86 arch:x86

51f87e8a06f84e5772a4ba7b4edab279

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumDesktopWindows
SetClassLongA
SetWindowRgn
GetActiveWindow
ValidateRect
IsCharAlphaNumericA
GetThreadDesktop
IsCharUpperW

ole32

CoRevokeClassObject
OleSetClipboard
IIDFromString

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetStartupInfoA
GlobalHandle
HeapDestroy
SetFileAttributesA
LoadResource
HeapFree
GetThreadContext
LocalFree
HeapCreate
SizeofResource
FindResourceExW
LocalAlloc
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ