781a29130d0f0a0697e2019c52bed917_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781a29130d0f0a0697e2019c52bed917_JaffaCakes118
Size

19KB
MD5

781a29130d0f0a0697e2019c52bed917
SHA1

a58b89107236b5cf89366add285ede92befb96bc
SHA256

c8e5d803ad37541375db5c4f87c1214f211388bb989ca42b4c975fed544bd4c9
SHA512

e4d2868c1872c7c4bfc52f4cba30e42141d389a70ed769883b3e9cab7992381f90b1d25d6f62a908d9c98d9eedad2001da593d5f9aa6d7906ad889b575e4f90e
SSDEEP

384:Xa3p9+HZ3XDYUYPKE8bUmzJK/P0uNU5NUclG:q3p9+VXDYtr88/P0EgDlG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781a29130d0f0a0697e2019c52bed917_JaffaCakes118

Files

781a29130d0f0a0697e2019c52bed917_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f56d6e7b4814a725b9f699b6281b83ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetOpenClipboardWindow
CreateDesktopW
PostMessageA
EnumPropsA
DdeNameService
SetTimer

kernel32

GetThreadLocale
IsProcessorFeaturePresent
TlsGetValue
TlsFree
TransactNamedPipe
ReadConsoleW
GlobalFlags

comctl32

ImageList_GetIconSize
FlatSB_SetScrollProp
GetMUILanguage
DrawInsert
ImageList_AddIcon
CreateToolbar
DrawStatusTextA

ntdll

ZwSetVolumeInformationFile
isgraph
RtlSelfRelativeToAbsoluteSD2
_ultow
RtlEnlargedIntegerMultiply
ZwOpenSemaphore

oleaut32

VariantCopy
VarCyFix
VarRound
VarBstrFromBool
VarR4FromI4
CreateTypeLib2
SysFreeString

ole32

OleCreateMenuDescriptor
STGMEDIUM_UserMarshal
UtGetDvtd32Info
HMETAFILEPICT_UserMarshal
StgOpenStorageEx
HACCEL_UserFree
CLSIDFromProgIDEx

Sections

.text
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 916B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ