ea4c7719293ca82bcab84acb7dda4554_JaffaCakes118 | Triage

Sharing

General

Target

ea4c7719293ca82bcab84acb7dda4554_JaffaCakes118
Size

675KB
MD5

ea4c7719293ca82bcab84acb7dda4554
SHA1

f2c6630d11ea12c3b9002e4e6014986dcc743df0
SHA256

839037b76f2fb282ef9d27ebf56cf48e281309a81d184e567fbfe872bed2a144
SHA512

61145607dcd1be377f951a2927e8471482215aa4049368739d8684655130f616ef0f637b81faadffb533410230f0ef613ca8bb36661f5983c26699771e0e0b0b
SSDEEP

12288:vCZrRHiCrBpZJmXFIKCvrfvaqOrHNpmbfx/GsIZpv:vCZFHiWBA1IKC7inLaTVGsIZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea4c7719293ca82bcab84acb7dda4554_JaffaCakes118

Files

ea4c7719293ca82bcab84acb7dda4554_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eb884d2bc7abd40e51920dbb36878a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ActivateActCtx
CreateActCtxA
CreateThread
ExitProcess
GetCurrentDirectoryA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
ConvertDefaultLocale
HeapSize
GetFileType
GetFullPathNameW
LoadResource
CreateFileA

user32

MessageBoxA
GetDC
GetActiveWindow
GetMenuState
GetScrollInfo
LoadCursorW
GetMessagePos

gdi32

GetBkMode
GetBkColor

ole32

CoCreateInstance
CreateStreamOnHGlobal
OleIsCurrentClipboard

comctl32

ImageList_Add
_TrackMouseEvent
ImageList_Destroy

advapi32

RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegOpenKeyExW

comdlg32

GetFileTitleW
GetOpenFileNameW

shell32

DragFinish
ShellExecuteExW

Sections

.text
Size: 607KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE