b4184167cc04006f19bab25d2ceded31_JaffaCakes118 | Triage

Sharing

General

Target

b4184167cc04006f19bab25d2ceded31_JaffaCakes118
Size

313KB
MD5

b4184167cc04006f19bab25d2ceded31
SHA1

a53e23927b15ad694028c217a82fb49724f8071d
SHA256

d2468bffc705f72db3be1be2c5d9f1cbe78054538d9f7f22f7b8d841ff6c7b62
SHA512

c5d610797101098a437d1f4285b95501910920971dbdca1a2baa0929a0b481c792fe83a3e119ad46dbc7a1285ad761edebd8190944ee7718125c0e31e1c8196c
SSDEEP

6144:E0knQefPhfzo23/aIdaRaVQfDis7RGt8OAJOJwGavEL6JtLChO09X0o1:ETnnrqIdavis7RVOeHCUtG8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4184167cc04006f19bab25d2ceded31_JaffaCakes118

Files

b4184167cc04006f19bab25d2ceded31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a8717af4afb0642e4b515f6381de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId

user32

IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect

gdi32

PatBlt

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ