f986756beba13ac1abca7bde20afb898_JaffaCakes118 | Triage

Sharing

General

Target

f986756beba13ac1abca7bde20afb898_JaffaCakes118
Size

285KB
MD5

f986756beba13ac1abca7bde20afb898
SHA1

c1b0a442614d2b510d315a98bac756e3ff577fd1
SHA256

cbaeb5144b4f4cc9cabfb4c4c84fb6bce085b0ddcac8daeaf0e175d7ed4394d5
SHA512

adbbddb307f99b400084c38019101e738298b04e841cc36e7606bfeb11028c95b15a4bba9178ffca875d93fa83dd8be46d8d0b724b756999437fb0040022ba8b
SSDEEP

6144:vJlpUFp6x0D/uygQbIH7Fv6usN+AdY6AqcUBUZbbKQVanZNG:va6x0LuHPHxSRN+czUUYbKQSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f986756beba13ac1abca7bde20afb898_JaffaCakes118

Files

f986756beba13ac1abca7bde20afb898_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99e2aa158d1029b607391f5bf8e9e71f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
SetFilePointer
IsValidCodePage
GlobalGetAtomNameA
GetCPInfo
GetLocaleInfoA
TlsSetValue
GetDateFormatA
TlsAlloc
GetOEMCP
VirtualAlloc
EnumResourceNamesA
MultiByteToWideChar
RtlUnwind
HeapSize
GetConsoleOutputCP
TlsGetValue
CreateHardLinkA
GetTimeFormatA
WriteConsoleA
SetStdHandle
GetACP
RaiseException

rpcrt4

RpcStringFreeA

shell32

SHGetFolderLocation
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteA
ShellExecuteExA
SHGetFileInfoA
SHBrowseForFolderA
DragAcceptFiles
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
Shell_NotifyIconA

user32

CharNextA
DispatchMessageA
DispatchMessageW
GetDesktopWindow
LoadStringA
MessageBoxA
PeekMessageA
wsprintfA

Sections

.text
Size: 128KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ