a10a1c284750dd1bd5772477fbfb12bf_JaffaCakes118 | Triage

Sharing

General

Target

a10a1c284750dd1bd5772477fbfb12bf_JaffaCakes118
Size

44KB
MD5

a10a1c284750dd1bd5772477fbfb12bf
SHA1

b8efa2e821957bfb338da0d58a7e89800f578c83
SHA256

197df67e1173ce59d01b29407f5a9756d00c1bff9fb6c484a306c881b73d5345
SHA512

231aedb087fbbea9b81c7dd85372710cf127eac5627645e15a7d28bb85678af1fed501c86dd248d770627a0a2673d27a79ea04c807141ff2018cf11587b635f1
SSDEEP

768:FXLevwd0XmuoA3IkaqH+fKuxXv/GQDnD8lg:Fbq8u9HaqeflxXvO0Db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a10a1c284750dd1bd5772477fbfb12bf_JaffaCakes118

Files

a10a1c284750dd1bd5772477fbfb12bf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

daa852c2508103ee3943c4406b52ba2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiber
GetCurrentProcessId
SetCurrentDirectoryA
OpenEventW
WaitForMultipleObjects
GetModuleHandleA
CopyFileExW
VirtualAlloc
GetModuleFileNameA
ExitProcess
GetTempFileNameW

user32

InsertMenuA
LoadIconW
SetParent
IsIconic
CharPrevA
GetDC
ClientToScreen
PostMessageW
CharLowerA
GetIconInfo
MessageBoxIndirectW

gdi32

CreateDCW
CreateCompatibleBitmap
SaveDC
DeleteDC
CreateFontA
SetDIBits

advapi32

RegSaveKeyW

comdlg32

PrintDlgExA
FindTextA

shell32

StrNCpyW

ole32

CoInitializeEx
CoCreateInstanceEx

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 780B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 210B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ