14abf2776bdbba37998e52487ea5dc22_JaffaCakes118 | Triage

Sharing

General

Target

14abf2776bdbba37998e52487ea5dc22_JaffaCakes118
Size

170KB
MD5

14abf2776bdbba37998e52487ea5dc22
SHA1

3d87bdd870bba84f37481ac48c7b88196631a49c
SHA256

b6ed102c8fc3c3d7df41c785f5b40771e1e5ea0c00ed5498a1b0bd4cdd550b56
SHA512

44eb095e1eb42aacef377b6ecc049b3d3e02e10b28a8d0dc79b3001a25ddc3104dcbfe019f3aa57355a9b50b632a94c1a7d32ad8b8ce49eefecbd618725deba0
SSDEEP

3072:Qy2+BBtCq6TkJ/p7gkbvGibpuVym8Otywpl32wXLTinknDgY6VzIhH1Wub9L5V:Qb+BBwOhTbvMwcEq328LTinkDrmMVWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14abf2776bdbba37998e52487ea5dc22_JaffaCakes118

Files

14abf2776bdbba37998e52487ea5dc22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1a3fc758aa3583e1c2e192965f51a9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
VirtualAlloc
HeapReAlloc
GlobalGetAtomNameA
GetTimeFormatA
GetACP
GetLocaleInfoA
GetConsoleOutputCP
GetDateFormatA
RtlUnwind
SetStdHandle
TlsSetValue
EnumResourceNamesA
TlsAlloc
GetCPInfo
SetFilePointer
CreateHardLinkA
WriteConsoleA
MultiByteToWideChar
HeapSize
TlsGetValue
IsValidCodePage
RaiseException

occache

FindControlClose

shell32

SHGetFolderLocation
DragAcceptFiles
ShellExecuteExW
SHGetPathFromIDListW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetMalloc
SHAppBarMessage
SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteW
Shell_NotifyIconW

Sections

.text
Size: 78KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ