ff7985a1910a3134278af9774e7d1a0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7985a1910a3134278af9774e7d1a0c_JaffaCakes118
Size

72KB
MD5

ff7985a1910a3134278af9774e7d1a0c
SHA1

98e5528c31e6b248d69cc64d883b14548427e466
SHA256

84986759d93be6dbdc7d1bcb5f69e3dfa44fdd4352cbaf739f176e4bceb73ce7
SHA512

dad897e9976fb7fef21fc0162a86ff4bc72370011fe3ba3f4f7404f0ee85ab86a08d8d9c3bb2bbfe362bb1464e9077d95df1161faf4ab01bec0d035872694dd4
SSDEEP

1536:3zLveWId8QzIMcrT3TU15eQCMB8TYTUbTvnEAYW1whAznJZwkB4lL:jLveWezIMcfK2My8onzlo+JZwkO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7985a1910a3134278af9774e7d1a0c_JaffaCakes118

Files

ff7985a1910a3134278af9774e7d1a0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0cc3c51ed8d79b223dd00aac3420c121

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncmp
__p__commode
_wfopen
memset
_acmdln
__getmainargs
fgets

user32

SetTimer
SetWindowLongW
LoadImageW
SetClipboardData
GetCursorPos
EndPaint

ole32

CoTaskMemRealloc
CoGetStandardMarshal
OleGetIconOfClass
OleCreateFromDataEx
CoCreateInstance
OleTranslateAccelerator

ulib

?InsertString@WSTRING@@QAEEKPBV1@KK@Z
??_7WSTRING@@6B@
?Cast@KEYBOARD@@SGPAV1@PBVOBJECT@@@Z
??_7OBJECT@@6B@
?CommitState@COMM_DEVICE@@QAEEXZ
?Truncate@WSTRING@@QAEKK@Z
??_7BSTRING@@6B@

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ