43882017270a1909894f53c9303c82d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43882017270a1909894f53c9303c82d3_JaffaCakes118
Size

62KB
MD5

43882017270a1909894f53c9303c82d3
SHA1

5b8303c6e9f140dc05515644734c3290ec347062
SHA256

ce2ef7b726dbfb93d1b72026aec8e3cc64f9091a1d22bf314414ba5968c399a8
SHA512

65f4bc2c2240d45ca8b8a0882c5227c3351e027e0cf51c7aee7513c02c9d19d1c06388f5b4ef8b860db56be1d825efb8d6ef746c0a81a459311300edc58dfab5
SSDEEP

1536:TO24fp7nvC991VHZnO+ryiLIfAqLEgOIaLGR+hccRd6CAKQQLCX33wFzs:TO1fp7K1rnO++iUfAqlhaLebCAzT8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43882017270a1909894f53c9303c82d3_JaffaCakes118

Files

43882017270a1909894f53c9303c82d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cd80fd6ec94e753973cac883c4a3dd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
LCMapStringA
LeaveCriticalSection
MultiByteToWideChar
OutputDebugStringA
ReadProcessMemory
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
lstrcmpA
lstrcmpiA
lstrcpynA

user32

GetMenu
GetMessageA
SetClassLongA
InvalidateRect
GetDlgCtrlID
FrameRect
EnumWindows
SetTimer
EndDeferWindowPos

ole32

CoCreateInstance
CreateAntiMoniker

oleaut32

SafeArrayCreate
SafeArrayAccessData
RegisterTypeLi
SysFreeString

Sections

.text
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ