71c27e71f9aed3431ac316f49df074c1_JaffaCakes118 | Triage

Sharing

General

Target

71c27e71f9aed3431ac316f49df074c1_JaffaCakes118
Size

51KB
MD5

71c27e71f9aed3431ac316f49df074c1
SHA1

d651b74969d6ab546f3ad5ea90d56a5b2d07c2a6
SHA256

35fe9ae4b08f8c3e8e9b4c69a6d05bd6c2e1131f682d4ed1cf513ad6faab90fd
SHA512

1633b391c33c3b93fa8711b13c291148c25d697fae48c5b42d3dc8f9e5deeb636bd2739fa7de7a9c97dae29e395f2ebc68b006562411a00102d8f1ea3e32c831
SSDEEP

1536:zRVuA7QMrvWj7JuRC7fUJJl9I0fcVHNMQ3g/OPDjx:9lRr+j7jQlhqNMQZPDjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c27e71f9aed3431ac316f49df074c1_JaffaCakes118

Files

71c27e71f9aed3431ac316f49df074c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2942e142b31ae93f12b6f4c87c7afb24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetHandleInformation
GetThreadContext
MulDiv
QueueUserAPC
SetUnhandledExceptionFilter
TlsFree
WinExec

user32

CharPrevW
CloseWindowStation
DefFrameProcA
DlgDirListA
DlgDirListComboBoxW
GetPropA
GetTopWindow
GetUpdateRect
LoadCursorFromFileW
MessageBoxExW
OemToCharW
RegisterClassExA
RegisterClassW
SwapMouseButton
TileChildWindows

shell32

Control_FillCache_RunDLLA
DllGetVersion
DllInstall
DoEnvironmentSubstW
InternalExtractIconListW
RealShellExecuteW
SHBrowseForFolder
SHGetPathFromIDListA
SHQueryRecycleBinA
SheConvertPathW
SheRemoveQuotesA
ShellExecuteExW

gdi32

CombineRgn
DPtoLP
DeleteColorSpace
GetClipRgn
GetICMProfileW
GetLogColorSpaceW
GetMetaRgn
GetObjectType
GetPolyFillMode
GetTextExtentPoint32W
SetBrushOrgEx
StretchBlt
UpdateICMRegKeyA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE