07d87f1c26e10ea58884446d7c6cc478_JaffaCakes118 | Triage

Sharing

General

Target

07d87f1c26e10ea58884446d7c6cc478_JaffaCakes118
Size

137KB
MD5

07d87f1c26e10ea58884446d7c6cc478
SHA1

6461a41788a40c6ef34e227ea35e705fc1900a72
SHA256

5ce1a53ff229473007098d950d5bc78aecb76d18fcecdfc5e613da52b0fa3cfd
SHA512

c24e3d6c827d2217ef0f55da7d24fd8723750bbabe1ceca645ad152852e675a72302bd5b3fedce967620b37a78ae20ab745d40735fb966185adfdffe2a110371
SSDEEP

3072:hBB7cZgRyYCO9sb9QNbOAFgnUkOQl2//R/R:vB7cWRDCO9JNbrU/OQl2/NR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d87f1c26e10ea58884446d7c6cc478_JaffaCakes118

Files

07d87f1c26e10ea58884446d7c6cc478_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3b692b934ee0b16afd5316df3f046484

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

InflateRect
InvalidateRect
GetDesktopWindow
GetParent

gdi32

GetBkColor
CreateRectRgn
ExtTextOutA
SetBkColor
DeleteObject

msvcrt

__p__commode
_except_handler3
_exit
tan
_XcptFilter
_itoa
__setusermatherr
_initterm
memcpy
__p__fmode
_adjust_fdiv
isprint
__set_app_type
__getmainargs
exit
_acmdln
_controlfp

comdlg32

GetOpenFileNameA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExA

version

GetFileVersionInfoSizeA
VerQueryValueA

ole32

CoInitialize
CoSetProxyBlanket

kernel32

GetCurrentDirectoryA
GetSystemDirectoryA
GetDriveTypeA
VirtualAlloc
GetStartupInfoA
GetModuleHandleA
CreateToolhelp32Snapshot

comctl32

ImageList_Create

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ