5d5cbf230d202fd14e35bb44dc1a36f0_JaffaCakes118 | Triage

Sharing

General

Target

5d5cbf230d202fd14e35bb44dc1a36f0_JaffaCakes118
Size

269KB
MD5

5d5cbf230d202fd14e35bb44dc1a36f0
SHA1

b8750f3452c7f6935a221424e9e5405dd17bfb08
SHA256

da17e5fbf152aec987d91485864757ef47117dbea5515e29bac942f835cab792
SHA512

efbdc4b904eb968b2b7282cb5d62f3a6960946b93f1d78c6b385646ca6a410f57446198126ed410d0a95f52021d2784fc460ab9927c3087e07304e45ff6e43e3
SSDEEP

6144:txERvjOj6vU0HgMpzwcl6S908EUo9NcOyI1/3:txaClMdwxSQlLyI1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5cbf230d202fd14e35bb44dc1a36f0_JaffaCakes118

Files

5d5cbf230d202fd14e35bb44dc1a36f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

665d0cd18526763cc76a51446c02d038

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapDestroy
SetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapCreate
VirtualAlloc
VirtualQuery
GetCurrentProcessId
EnumSystemLanguageGroupsW
VirtualFree
QueryPerformanceCounter
GetWriteWatch
TlsAlloc
IsBadWritePtr
HeapReAlloc
TlsFree

msimg32

AlphaBlend
TransparentBlt

oleacc

CreateStdAccessibleObject
AccessibleChildren

winmm

mciSendCommandA
sndPlaySoundA

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

user32

LoadStringA
GetDlgItem
GetWindow
CreateWindowExA
SetWindowTextA
LoadImageA
DestroyIcon
GetParent

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ