3188344854588c001b9fb1801cd02cf5_JaffaCakes118 | Triage

Sharing

General

Target

3188344854588c001b9fb1801cd02cf5_JaffaCakes118
Size

40KB
MD5

3188344854588c001b9fb1801cd02cf5
SHA1

fca48d90b1ad49e2369301dc56073820658bf5d5
SHA256

5bf54fffc947fc74089d9db59dba47fe3c6f54915e7aaf224deeb7d96e2fbfce
SHA512

f1b0c6130cae86b33de66acd0b312b52ec56eb4b7ad1c103e9fd953fe453ddd0d72f81bcb6f0393005aa4b6a1f67ae2cec59fb4f9b0fd983449942e80c414cd9
SSDEEP

768:F2T4jwgTOl/tFr60FIgbrcAztf9Jrd0NV+RQmgQ0N2UxZuf:IT40UOlzr7lMAztf7QmgQAyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3188344854588c001b9fb1801cd02cf5_JaffaCakes118

Files

3188344854588c001b9fb1801cd02cf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ