00f7363f87f8c119c32ff93f0fd4a1a3_JaffaCakes118 | Triage

Sharing

General

Target

00f7363f87f8c119c32ff93f0fd4a1a3_JaffaCakes118
Size

284KB
MD5

00f7363f87f8c119c32ff93f0fd4a1a3
SHA1

0df7c5cf11c19872c1088544828c0d5ed260c757
SHA256

bc374b51178dda843643be87fe37fd0b2e6518be16fb500a74abac2ae5dfbbbe
SHA512

062f64070d2fa2ca0ee2392e827fd15706e8d6f5c74c0589b1331b3a57b22da246aaa96c547eb577285baae4d7757f60a51303b87b8ce7ed5aad39fa11f0a488
SSDEEP

6144:GSliSmv/UN/HNn/s9FPSSdEnAh0QgL91b5r10xUpBCySeK3kc:GeLmXoWZ5EnDL9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f7363f87f8c119c32ff93f0fd4a1a3_JaffaCakes118

Files

00f7363f87f8c119c32ff93f0fd4a1a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe410ed404949e631a6f7bd58398eb2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GlobalGetAtomNameA
GetOEMCP
IsValidCodePage
GetACP
TlsSetValue
WriteConsoleA
RtlUnwind
HeapReAlloc
TlsAlloc
VirtualAlloc
EnumResourceNamesW
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetConsoleOutputCP
SetStdHandle
GetCPInfo
GetTimeFormatA
GetLocaleInfoA
HeapSize
GetDateFormatA
RaiseException

rpcrt4

RpcStringFreeA

user32

MessageBoxA
CharNextA
DispatchMessageW
DispatchMessageA
GetDesktopWindow
LoadStringA
PeekMessageA
wsprintfA

shell32

SHGetSpecialFolderLocation
DragAcceptFiles
SHAppBarMessage
SHGetPathFromIDListA
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ