84cdb82ba760ebb5eba4d72b0490bd9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84cdb82ba760ebb5eba4d72b0490bd9a_JaffaCakes118
Size

50KB
MD5

84cdb82ba760ebb5eba4d72b0490bd9a
SHA1

fc3c2c670ca3636cbaa09d15342fe6bb29fb0b31
SHA256

9436769369675e0de1346537e91dac90edcadf924908900e0f083975d028d217
SHA512

005d7b9ac9e9843b53232865e33c19e5e9f9663a8081d3655d260b25e9f8d4a316c103be9cd9a2b0f59cd65b1abd8bf8386298e9723ffbed0b9862a9ec604310
SSDEEP

1536:usULuP4UVgaxXXcB+aIDWenRVdoIkWwL:usJwUKSXcB+aIDvjeL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84cdb82ba760ebb5eba4d72b0490bd9a_JaffaCakes118

Files

84cdb82ba760ebb5eba4d72b0490bd9a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

469d6afadd5c223c3d784cbca5e9c762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCaretBlinkTime
GetDoubleClickTime
GetAsyncKeyState
BeginPaint
GetCapture
SetWindowTextA
EndPaint
GetDesktopWindow
EnumChildWindows
RegisterClassExW

gdi32

GetBrushOrgEx
CreatePolygonRgn
DeleteObject
GetTextColor
GetStockObject
GetArcDirection

comctl32

ord17

kernel32

HeapDestroy
LocalSize
GetStartupInfoA
LocalAlloc
GetEnvironmentVariableA
SetEndOfFile
GetLastError
LocalFree
HeapFree
GetEnvironmentStrings
GetProcAddress
FreeLibrary
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
GetDateFormatA
HeapAlloc
HeapCreate
GetCurrentDirectoryA
GetTickCount
GetThreadLocale
SetFileAttributesA
SetHandleCount

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ