fce3f15f4f8765e02eb5e30f30fb1abb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fce3f15f4f8765e02eb5e30f30fb1abb_JaffaCakes118
Size

76KB
MD5

fce3f15f4f8765e02eb5e30f30fb1abb
SHA1

1e498147e122d8f0672a9cb998d4f65060f28b72
SHA256

17a0989b9ef131442babcbe166e285e72e21dbf9e3b8fb76e89a117a410d9d4e
SHA512

6f4d440d378acd2fa71dafa7501c04c9d954333ff863acaf22463b3357791fec85ced8a789022c9d952b784cd8e0bc27f1b5eaa9a358f833a8577ed98b2cc434
SSDEEP

768:moz723l2/vqvBkVLLub6eyfbs+mX2FUl02CLRa+YFF1fnfG97wRs/AcWOS0Q09qZ:mgwl2/+a9LuBX2FUaarF5nfOHFYiMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fce3f15f4f8765e02eb5e30f30fb1abb_JaffaCakes118

Files

fce3f15f4f8765e02eb5e30f30fb1abb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ddc036d5a5a36bd09624122127b3eeeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumDesktopWindows
GetActiveWindow
IsCharAlphaNumericA
IsCharUpperW
ValidateRect
SetWindowRgn
GetThreadDesktop
SetClassLongA

ole32

CoRevokeClassObject
OleSetClipboard
IIDFromString

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

HeapDestroy
GetStartupInfoA
HeapFree
HeapCreate
LoadResource
LocalAlloc
GetThreadContext
GlobalHandle
LocalFree
FindResourceExW
SizeofResource
SetFileAttributesA
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ