7435f47e316077b8c27f1876fd30afb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7435f47e316077b8c27f1876fd30afb2_JaffaCakes118
Size

356KB
MD5

7435f47e316077b8c27f1876fd30afb2
SHA1

637e101e18742cef7ba783e9d9bfd0d5d76c6e5e
SHA256

d834d866201e22f3a285a3bb7459c24065d10fe99bbc964bc37da8d98848f8e2
SHA512

4575d33528ec29a648f712b0fed90f3307b9a42e17edbb4855a7d66b97cc41c882cad22a92d0803d4847af218ad34ef0212b44b52f080c30cdc102be9e5fc8d6
SSDEEP

6144:Zb+iKjuQm5K1f8tpn7reLmHAfL6JRGcZdUTteF5sYnCXw7mf8+/chTeNVQR:YjGumpn7rqoAfoRD3cQVmw7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7435f47e316077b8c27f1876fd30afb2_JaffaCakes118

Files

7435f47e316077b8c27f1876fd30afb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb34d8e3b3eb92b30586e79937f29b91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
WaitForSingleObject
VirtualFree
GetSystemTime
ExitProcess
GetTempPathA
VirtualProtect
ResumeThread
GetLastError
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
GetFileType
GetPriorityClass

user32

OpenIcon
IsWindowUnicode
GetParent
InSendMessage
GetWindow
LoadIconA

gdi32

SelectObject

advapi32

CopySid
AddAce

ole32

CoInitialize
CoUninitialize

msvfw32

DrawDibStop

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ