bc14023b60659c7bb63f84630212e06b_JaffaCakes118 | Triage

Sharing

General

Target

bc14023b60659c7bb63f84630212e06b_JaffaCakes118
Size

171KB
MD5

bc14023b60659c7bb63f84630212e06b
SHA1

20803838591eebbbb80abc136bfb385a115da2ac
SHA256

68dfaaf7802b74a855ad573118f23c3c09daae2da7c2f41a617375b2d047e6aa
SHA512

1c932cac3bd86826eb6d29249697f308de36e75eedd7b327d7412ddf9e116bfd36ce38e07dd818cfc6b9e1c1cd9c3166eba258a1a51629131b4572e715cd0dd9
SSDEEP

3072:YxIhopytxbhcpm6Q6XtCUq3VOqRT1HrSNsn4k9I8MWxCLmtiJ:GytFezQ6dFV+1L9n3/2m0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc14023b60659c7bb63f84630212e06b_JaffaCakes118

Files

bc14023b60659c7bb63f84630212e06b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b6fd42191cc4b2f3fa1556c8440e512

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItem
DestroyWindow
EnumChildWindows
IsWindow
CreateWindowExW
SendMessageA
GetWindowThreadProcessId

kernel32

HeapReAlloc
RaiseException
GetCalendarInfoW
VirtualFree
EnterCriticalSection
ReadFile
DeleteCriticalSection
GetCPInfo
HeapDestroy
SetEndOfFile
GetOEMCP
HeapSize
IsValidCodePage
EnumResourceNamesA
FreeEnvironmentStringsA
VirtualAlloc
GetACP
HeapCreate
RtlUnwind
InitializeCriticalSection
GetStartupInfoA
SetFilePointer
LeaveCriticalSection
ExitProcess
SetEnvironmentVariableA

ole32

CoGetMalloc
CoSetProxyBlanket
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoUninitialize
CoQueryProxyBlanket
CoInitializeSecurity
StringFromGUID2

rpcrt4

UuidCreate

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ