cf5f69e23f406b38d72266892123c5cb_JaffaCakes118 | Triage

Sharing

General

Target

cf5f69e23f406b38d72266892123c5cb_JaffaCakes118
Size

201KB
MD5

cf5f69e23f406b38d72266892123c5cb
SHA1

681d2b255e468463a9b385e80a4fb29f544f28d3
SHA256

26260ccb8ea9cefded3a95e26c24f2a20e680392b3dd054662b0485eecab2249
SHA512

6daa9ccf3583bbb2c09d7697e9c179542686c434394e4b423a7f34aa5c1293a8a72868442de69060871d12f40a029f685998f86baff4a0a7d43750c26000bd84
SSDEEP

3072:O4zJZIMtTS8Atp7wfP0KlrzlTL2yLiCtfUJ9ykRZd+k3U6ABS+0:O4fBtm8AjkHPlrJayLiKUry2ZdNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf5f69e23f406b38d72266892123c5cb_JaffaCakes118

Files

cf5f69e23f406b38d72266892123c5cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7749632aebe7c9c34209c060c19af68c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICSendMessage
ICOpen
ICClose
ICDecompress

kernel32

CloseHandle
GetShortPathNameA
GetCurrentProcessId
GetHandleInformation
UnhandledExceptionFilter
LoadLibraryW
GetCurrentThreadId
EnumResourceTypesW
CreateFileW
ExitProcess
GetLastError
GetProcAddress
GetModuleHandleW
GlobalFree
GetVersionExW

user32

LoadCursorW
ClipCursor
IsWindow
GetDesktopWindow
SetParent
RedrawWindow
InvalidateRect
SetWindowPos
GetFocus
DestroyMenu
SetCursor
TrackPopupMenuEx
CreatePopupMenu
EnableWindow
PtInRect

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ