aba388aa47d23b599ec9b60da76b245f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aba388aa47d23b599ec9b60da76b245f_JaffaCakes118
Size

263KB
MD5

aba388aa47d23b599ec9b60da76b245f
SHA1

055d3138c082fd2281a45b5c08ee3eddc27d6bd2
SHA256

1a137ecd0cf9ad2a92cda3aa5e63168b4396f76529a5cf46b2828589effafbb8
SHA512

85870a55ca02733be4734c37f164ac485b101befa61cf7933175ce50ae417693d125dbb8133cd71b2f90c32c6af5254b92b084780cd09f0231a265ecdd31104a
SSDEEP

6144:QQ3SvHa3fn6BhMmZke5RnpUqmuwe7kolcaNCJwRmIHno18KyuZ05A:QC0av6nMm15Rnpbwehcy8IMx0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba388aa47d23b599ec9b60da76b245f_JaffaCakes118

Files

aba388aa47d23b599ec9b60da76b245f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

210b8004007e9e3d9d23ce097315368e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetOEMCP
HeapSize
SetHandleCount
GetSystemInfo
TlsSetValue
VirtualProtect
VirtualAlloc
EnumSystemLanguageGroupsW
TlsGetValue
VirtualQuery
TlsFree
GetFileType
GetWriteWatch
GetCPInfo
RtlUnwind
GetStdHandle
GetStartupInfoA

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

oleacc

CreateStdAccessibleObject
AccessibleChildren

winmm

mciSendCommandA
sndPlaySoundA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

user32

GetWindowInfo
GetDC
SetWindowPos
FillRect
GetDlgItem
GetSysColor
IsWindow
LoadCursorA
GetWindowLongA
SetWindowLongA
ReleaseDC
ReleaseCapture
SetCursor
MoveWindow
SetCapture

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ