b94ffccfe52c3bcbd45da15336ebd0eb_JaffaCakes118 | Triage

Sharing

General

Target

b94ffccfe52c3bcbd45da15336ebd0eb_JaffaCakes118
Size

360KB
MD5

b94ffccfe52c3bcbd45da15336ebd0eb
SHA1

ec0e43a67010748d7fdcca661cf080ee3ea3104d
SHA256

14736a95f97b899beb7107f9e6a85edec14b6f1af94049034c7ef3341fce53f3
SHA512

0daaaf4218da88c7dbe58a90859c8541b207e637890a42ea1e7c9c3aef1ae51a1b1b5bc382bdcebc9d741d2a505d38a314fc0b5982930d60ff00f5cc515ec6fb
SSDEEP

6144:jVd7xqxyZ3BsjfXxwpaaodqbUpyS/j7va9TTpSNK4kD2:jVd7xn3BsjOIewyS/jja9TTMNKa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b94ffccfe52c3bcbd45da15336ebd0eb_JaffaCakes118

Files

b94ffccfe52c3bcbd45da15336ebd0eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c6ed2509f1cca5f4bacf18525e54dd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
GlobalLock
ExitProcess
GetSystemDirectoryA
GetSystemTime
GetProcAddress
GetFileType
ResumeThread
VirtualFreeEx
Sleep
GetProcessHeap
GetTempPathA
VirtualLock
SetEvent
LeaveCriticalSection
VirtualQuery

user32

DestroyWindow
GetTopWindow
UpdateWindow
GetSysColorBrush
LoadAcceleratorsA
IsZoomed

advapi32

CopySid
AddAce

ole32

CoUninitialize

psapi

EnumProcessModules

msvfw32

DrawDibDraw

avifil32

AVIStreamCreate

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ