5c78979e538acb8761d46fff903e57f2_JaffaCakes118 | Triage

Sharing

General

Target

5c78979e538acb8761d46fff903e57f2_JaffaCakes118
Size

183KB
MD5

5c78979e538acb8761d46fff903e57f2
SHA1

ad35a71e0b3d696c389f0c590b8840726447c42d
SHA256

7d3083ea55db9ee78e6c97851f340a3cde2a345b1b9014e96aaff49a9ca3b89e
SHA512

e9bc2a6041b0ba7e8e04f53046db115c85287842e53ea837d4ec37ba124b8dde37f28b69c2785a798a4e32b9eedce0103862fcac2cf25923aa22d2c11ecc8e07
SSDEEP

3072:KZJTsq7jfcetTVq10I+CyMC+Geon8+umLc9frT8Dcrt92TCXY6rMlZRkPt0:KjTsQEwoeItyt+vonQnTT8AR95otzkPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c78979e538acb8761d46fff903e57f2_JaffaCakes118

Files

5c78979e538acb8761d46fff903e57f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

188dec61984f05443a8eed625e14ca91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapDestroy
HeapReAlloc
HeapCreate
HeapAlloc
GetCurrentProcessId
VirtualQuery
GetSystemTimeAsFileTime
QueryPerformanceCounter
EnumSystemLanguageGroupsW
VirtualFree
SetLastError
IsBadWritePtr
GetWriteWatch
TlsAlloc
VirtualAlloc
TlsFree

shlwapi

PathAddBackslashW

user32

CreateWindowExA
GetDlgItem
DestroyIcon
LoadImageA
SetWindowTextA
LoadStringA
GetWindow
GetParent

oleacc

CreateStdAccessibleObject
CreateStdAccessibleProxyA

shell32

SHGetMalloc
SHChangeNotify
SHGetPathFromIDListW

winmm

mciSendCommandA

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ