b131be44446dbef2992251a6a599c650_JaffaCakes118 | Triage

Sharing

General

Target

b131be44446dbef2992251a6a599c650_JaffaCakes118
Size

63KB
MD5

b131be44446dbef2992251a6a599c650
SHA1

9396ebf192f207b4ee8a3858e5ca2d14122d55eb
SHA256

1c49af854e0f27bfcdde7ce4ec86d8924a4d2a42663446da128006e14c2176b9
SHA512

6be707621be95a9847344c60dc67006d97601729d8af8e4a8498e6c7c783133ede82441df48e7452544e0b042bb1dd9473227f825ec856efbea27e60fec7f698
SSDEEP

1536:GjWl5CR3PqmDuegzUF/Bic+gwGzBzQamITXCJthsTYVp5ruKwqKMfZD0HN4vQd4M:G25CJPqmDueFygwKMa3TXCJthsK5ruld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b131be44446dbef2992251a6a599c650_JaffaCakes118

Files

b131be44446dbef2992251a6a599c650_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94865cfe957d72bdc64007e7861857a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharUpperW
GetThreadDesktop
EnumDesktopWindows
SetWindowRgn
ValidateRect
SetWindowTextA
SetClassLongA
IsCharAlphaNumericA
GetActiveWindow

ole32

CoRevokeClassObject
OleSetClipboard
IIDFromString

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

HeapFree
HeapDestroy
SetFileAttributesA
LocalAlloc
GlobalHandle
LocalFree
HeapCreate
LoadLibraryA
GetProcAddress
FreeLibrary
LoadResource
FindResourceExW
GetThreadContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ