879619c7dc6757a4a772ad2d8e3d7422_JaffaCakes118 | Triage

Sharing

General

Target

879619c7dc6757a4a772ad2d8e3d7422_JaffaCakes118
Size

182KB
MD5

879619c7dc6757a4a772ad2d8e3d7422
SHA1

ee038b862e7d46bfefe43eccbe32d6c57878e560
SHA256

849774793db306c5d5e1bd73a693eb548393b6992cd983a6f9e79e23481dc5ad
SHA512

e080a3b57f421fdaff5d1eebf8bcf1845453d93e7f732edee72060a25a8b740d8ef590ae7b15d45dededa3547de040bd503946f9f0b84077e6b46abf7c9a198b
SSDEEP

3072:40OLymP2mq3U0aMbAsRquyUU+/gZg+a3PtTRzoMWNyIgTtLbmCdwyD8ej0E1KjMr:npzmEUGAlcoGvPttzoZNyxT5qpy4EIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879619c7dc6757a4a772ad2d8e3d7422_JaffaCakes118

Files

879619c7dc6757a4a772ad2d8e3d7422_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63c75937edec93d0e43064820252b69a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
HeapFree
HeapCreate
VirtualFree
HeapDestroy
GetSystemTimeAsFileTime
TlsAlloc
GetCurrentProcessId
EnumSystemLanguageGroupsW
VirtualQuery
SetLastError
HeapReAlloc
QueryPerformanceCounter
GetWriteWatch
IsBadWritePtr
HeapAlloc
TlsFree

shell32

SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW

shlwapi

PathAddBackslashW

oleacc

CreateStdAccessibleObject
AccessibleChildren

winmm

mciSendCommandA

user32

LoadImageA
DestroyIcon
GetWindow
CreateWindowExA
LoadStringA
SetWindowTextA
GetDlgItem
GetParent

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ