0f339d1711a8c59607c581289e8ebde3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f339d1711a8c59607c581289e8ebde3_JaffaCakes118
Size

279KB
MD5

0f339d1711a8c59607c581289e8ebde3
SHA1

53388221ca8afbe896937eae6d79e33a76784359
SHA256

ca4f4eb53f286910101b606688a474140ccaa89670401fd1fc9581a29c76e844
SHA512

2168deff6de2c6f371f58fc6f55f7c4c4c696d3c54c787230917db0e32a057dcec8b2f896c4e528218d7af720c435efa844d238d61333e116fea352bd9ecd658
SSDEEP

6144:nMul2GcTE02NiUBXMJ1G9peq5ct3AAfqKU90/:MuleI02XOw6tASqx90/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f339d1711a8c59607c581289e8ebde3_JaffaCakes118

Files

0f339d1711a8c59607c581289e8ebde3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cebd5c852d8bd7547aad3fb8744c8cd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapCreate
HeapReAlloc
IsBadWritePtr
VirtualFree
HeapDestroy
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError
EnumSystemLanguageGroupsW
VirtualAlloc
TlsAlloc
VirtualQuery
GetWriteWatch
QueryPerformanceCounter
HeapAlloc
TlsFree

shlwapi

PathAddBackslashW

user32

SetWindowTextA
DestroyIcon
GetWindow
GetDlgItem
CreateWindowExA
LoadImageA
LoadStringA
GetParent

shell32

SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW

oleacc

CreateStdAccessibleObject
AccessibleChildren

winmm

mciSendCommandA

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ