bca87a3ec9700505af229e3f399a0218_JaffaCakes118 | Triage

Sharing

General

Target

bca87a3ec9700505af229e3f399a0218_JaffaCakes118
Size

314KB
MD5

bca87a3ec9700505af229e3f399a0218
SHA1

0a1302c8e1ce747d7cb41e5d206529f06f177d0f
SHA256

40d88efabb6cf5e12c58dd732823ba69d23a3ce3262e5883186cf0c0107b7808
SHA512

2cb2264b2c9ad58cf12abc2cf1e2f3c2b99644b60b850d17e45002e61947a7dd041b714c5ed9f927f40b415f4ab82b86b9cebcac35c950a0b2b3d4588be7bb39
SSDEEP

6144:xpGuECvlXg27uJ6HJ3WwYdWpHY1UkWcUInByHm6:3GBklw27Q6p7ciiUb5YBMm6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca87a3ec9700505af229e3f399a0218_JaffaCakes118

Files

bca87a3ec9700505af229e3f399a0218_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a8717af4afb0642e4b515f6381de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId

user32

IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect

gdi32

PatBlt

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 210KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ