86bc29747c15fd663fab008b78b586b4_JaffaCakes118 | Triage

Sharing

General

Target

86bc29747c15fd663fab008b78b586b4_JaffaCakes118
Size

34KB
MD5

86bc29747c15fd663fab008b78b586b4
SHA1

fe6ae7486de47b43c85e4d84e4011404c976d5ef
SHA256

3a87b5e3a5e1c0bfa001b84f9725c5e780c871b5de1af2354abd769900ddaaba
SHA512

b66250e85445bef76b5f9d11dbbd40246e8458853724c4e8b3cbe0ede71525c593635f0d880ede29315f8b8de3d82b21ff64a0b510e7c2bbb338ff39e5838d91
SSDEEP

768:kIPl3LO8+CQEkPPKRLpewx6cX3rz7likIEuLHIqyyziI3SkpQlTg:kIt3Lll7vx6cX3rdfIEQHdCXTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86bc29747c15fd663fab008b78b586b4_JaffaCakes118

Files

86bc29747c15fd663fab008b78b586b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34fca1ae6378ace9a1c70366cfb30a5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
EnumSystemLocalesA
ExitProcess
FindAtomA
GetCommState
GetDiskFreeSpaceExW
GetThreadLocale
GlobalFix
LocalFlags
LocalFree
RtlMoveMemory
lstrlenW

shell32

DuplicateIcon
PrintersGetCommand_RunDLL
RealShellExecuteA
SHGetFileInfo
SHGetSpecialFolderPathW

gdi32

AnimatePalette
CombineTransform
Ellipse
GetArcDirection
GetOutlineTextMetricsA
GetRandomRgn
GetWinMetaFileBits
OffsetViewportOrgEx
PolyPolygon
ResizePalette
SelectClipPath
SetBitmapBits

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE