4c7553d69e6c0cae13fd92b0d87bc256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c7553d69e6c0cae13fd92b0d87bc256_JaffaCakes118
Size

354KB
MD5

4c7553d69e6c0cae13fd92b0d87bc256
SHA1

e13e2c0fa0285d568f47ec5a5d58b86562b9c18e
SHA256

0f0f7fd232d21d5dcc7c87e3f8d7c1c6749bbd7fde11657f6fcb559338cdfc3f
SHA512

1829499a9507f94699e3b0d5b98f3df3b560ec323e37bc61149ec9d5484b476f02f7b7b263d2061c198a117b242ef50fcb804200cd439ba8589e653947e9942e
SSDEEP

6144:rqBNKJi2giBEwFCyrfhUvrwiOjxV1uz7T37lHQuB30mPhifswbB:+BNfiBhEyrZUROjxfs7tkshifso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7553d69e6c0cae13fd92b0d87bc256_JaffaCakes118

Files

4c7553d69e6c0cae13fd92b0d87bc256_JaffaCakes118
.exe windows:5 windows x86 arch:x86

537e5d2288e48c3a19c98a93e3f9c604

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SetWindowPos
IsCharAlphaNumericW
GetActiveWindow
ValidateRect
SetClassLongA
OemKeyScan

ole32

CoLoadLibrary
OleGetAutoConvert
OleLockRunning

kernel32

GetCurrentProcessId
SizeofResource
GetStartupInfoA
HeapDestroy
HeapFree
LocalAlloc
GlobalLock
LocalFree
GlobalUnlock
GetUserGeoID
HeapCreate
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress

Sections

.text
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ