b3cb288e0c3addc672f54a6ad0197567_JaffaCakes118 | Triage

Sharing

General

Target

b3cb288e0c3addc672f54a6ad0197567_JaffaCakes118
Size

280KB
MD5

b3cb288e0c3addc672f54a6ad0197567
SHA1

eabc9d22cc16631e0ed95caab0bde241a227bd76
SHA256

dc88d553944c4dba967065b2d4a08893bbf45181aae1ce1aed9c876c8a06746e
SHA512

b8dfc87c219ee22ed98c8f665b8bf27799c2793e5c5f74797e629be58678a14956c163dd4812b0f4b111323d5708700796f63488af47fefa0eaf6d661e552eb6
SSDEEP

6144:CpyfFeWz/fOMsdcIg/f/xpOgNG9OI0l3MqY2:zz+vmxp3g4I0l8I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3cb288e0c3addc672f54a6ad0197567_JaffaCakes118

Files

b3cb288e0c3addc672f54a6ad0197567_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c6848144bb91ce024d612fe788b26b13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ValidateRect
SetClassLongA
GetActiveWindow
OemKeyScan
SetWindowTextA
SetWindowPos
IsCharAlphaNumericW

ole32

OleGetAutoConvert
CoLoadLibrary
OleLockRunning

kernel32

GetSystemTimeAsFileTime
CopyFileW
CreateProcessW
SizeofResource
HeapDestroy
HeapFree
GlobalLock
GlobalUnlock
LocalAlloc
IsSystemResumeAutomatic
HeapCreate
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA

Sections

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ