ff339497809bb303cb69b5b910c000d1_JaffaCakes118 | Triage

Sharing

General

Target

ff339497809bb303cb69b5b910c000d1_JaffaCakes118
Size

181KB
MD5

ff339497809bb303cb69b5b910c000d1
SHA1

ed2185cf6195fc3677888fdc1a1edcf53e54bdef
SHA256

3802b9d43983b494d5b3274b53b72a564ebd9061dae5f76c2887a5a28c91ee37
SHA512

ce6f4430e1ad5273dc8e52324a47d68585301d632a6101323d519d9a3b26cfe112a5ebc1f32330ee23e3982a828bc7bc0685978711de392c47f39b4b431eb590
SSDEEP

3072:TEtJGuGcXYnjJBGOQxqRahOEak2pLc6xpdsAttKgacPpfwDot+em:TcGuojhQxH3yA6xpdswKgaIfwRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff339497809bb303cb69b5b910c000d1_JaffaCakes118

Files

ff339497809bb303cb69b5b910c000d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57e3a045ead80f98bbcf0e8367bd190b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetDateFormatA
HeapReAlloc
GlobalGetAtomNameW
RtlUnwind
MultiByteToWideChar
WriteConsoleA
HeapSize
TlsSetValue
TlsGetValue
EnumResourceTypesA
GetCPInfo
TlsAlloc
GetLocaleInfoA
SetThreadExecutionState
SetFilePointer
SetStdHandle
IsValidCodePage
VirtualAlloc
GetOEMCP
GetACP
GetTimeFormatA
RaiseException

rpcrt4

RpcStringFreeA

user32

PeekMessageA
DispatchMessageA
LoadStringA
MessageBoxA
GetDesktopWindow
CharNextA
DispatchMessageW
wsprintfA

shell32

SHGetDataFromIDListW
SHGetFileInfoA
SHGetPathFromIDListA
ShellExecuteExA
SHBrowseForFolderA
DragAcceptFiles
Shell_NotifyIconA

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ