c78bf2b942c3dd1870c6249884b0534c_JaffaCakes118 | Triage

Sharing

General

Target

c78bf2b942c3dd1870c6249884b0534c_JaffaCakes118
Size

188KB
MD5

c78bf2b942c3dd1870c6249884b0534c
SHA1

68003e716a89107e8c0d188b4cc02a0564311023
SHA256

2cfe70cd400a179e8fed248aa0ee06b883ccd3b760352f51fd053430f54c66ec
SHA512

6c2513b2e47d2cddd14c03b434433a56be9f2102276ba1d7d4d1ccf0e3fe01d943217a3ebd6b28d018b440b6708d30b3a6e7c819c02bc3e7f33382e925296aa7
SSDEEP

3072:2QTuLCi8eZ1kztZGNmsCY2/TB/aTU9yQtvK4mKST15dYqqC223/fJ:2QTMzDYtQ8aTwNt6YqqC2UnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78bf2b942c3dd1870c6249884b0534c_JaffaCakes118

Files

c78bf2b942c3dd1870c6249884b0534c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a98eb5d0c6327e6614034ac41590047

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
wsprintfW

kernel32

GetShortPathNameW
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
GetProcAddress
GetProcessTimes
LocalFree
CloseHandle
GetModuleHandleA
EnumResourceTypesA
IsDebuggerPresent
InitializeCriticalSection
ExitProcess
UnhandledExceptionFilter
DeleteCriticalSection
SetUnhandledExceptionFilter
GetLastError
GetVersionExA

msvfw32

ICSendMessage
ICOpen
ICClose
ICDecompress

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ