01ff97f6c4c0963fc506a23ca37c9b37_JaffaCakes118 | Triage

Sharing

General

Target

01ff97f6c4c0963fc506a23ca37c9b37_JaffaCakes118
Size

162KB
MD5

01ff97f6c4c0963fc506a23ca37c9b37
SHA1

610763e607fd6a400b7c84f21dbf8086cef8b633
SHA256

b665469a3bb1a04d575ecea6b3e6a9249c5d23ef1f784d71d6febf302e97fb24
SHA512

29a463a4b9d65f941a8c210e2884d3496a61311fb3a1c3d3b8fc0a8e6dd06ed0a6a1b3cca356c65cf169542edd7341927cb366c91183162f9475a79c26d7a5da
SSDEEP

3072:qNPFf+RHBZl8QyJPEzes9pdXPwpzj8SgDevjlcttnTSSMp0f:DRhj8QyPd/pzj83evjwnuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ff97f6c4c0963fc506a23ca37c9b37_JaffaCakes118

Files

01ff97f6c4c0963fc506a23ca37c9b37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

75c6200c008a2c9f3a449743c68b54f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
IsSystemResumeAutomatic
ExitProcess
CreateFileA
HeapAlloc
HeapFree
GetWindowsDirectoryA
GetProcessTimes
HeapDestroy
HeapCreate
ReadFile
lstrcatA
CloseHandle
DeleteFileA
lstrcpyA
GetPrivateProfileStructA
ConnectNamedPipe
WriteFile
CreateProcessA

user32

GetClipboardViewer
GetActiveWindow
IsCharAlphaA
MapVirtualKeyA
LoadAcceleratorsW
IsWindowUnicode

shell32

ord98

comctl32

ImageList_Copy
ImageList_Create
ord17

msvcrt

_except_handler3

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ