823d0883c9acf4dd0a8f76deb64c136d_JaffaCakes118 | Triage

Sharing

General

Target

823d0883c9acf4dd0a8f76deb64c136d_JaffaCakes118
Size

154KB
MD5

823d0883c9acf4dd0a8f76deb64c136d
SHA1

ef541d191679f83551a135e0f77862c069261596
SHA256

b201aaac0ceda6c6e1a64982d097c42d7998187a377dc1ac305503a708b89b7d
SHA512

ce5f8d8ae4b8e5661188f57b5edcc36428d4fa865b2f0c9d7d0670e102e1854ec22459472d259daebc2b0a563c63d2d4c976a264901fe5324fbb604399198362
SSDEEP

3072:Db9bsSh577GUTiAg03W1EKKqYIWmEb8XFO:P9bH/7fgGLInEb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
823d0883c9acf4dd0a8f76deb64c136d_JaffaCakes118

Files

823d0883c9acf4dd0a8f76deb64c136d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b69c8eee64a6100eca18a8ad817fd3b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyA
lstrlenW
lstrcpyW
OutputDebugStringW
FindClose
lstrcpyW
CheckRemoteDebuggerPresent
GetTickCount
EnumResourceTypesA
GetLastError
WideCharToMultiByte
GlobalAlloc
LockResource
MultiByteToWideChar
GlobalFree
InitializeCriticalSection
GetACP
lstrcmpiW
DeleteCriticalSection
GetCPInfo
GetModuleHandleW

user32

PostThreadMessageW
CharNextW
wsprintfW
KillTimer
GetDC
TranslateMessage
SetTimer
GetMessageW
SendMessageW
CharUpperW
DispatchMessageW
UnregisterClassA

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ