f276498ca3368e3b3cae395669c90113_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f276498ca3368e3b3cae395669c90113_JaffaCakes118
Size

166KB
MD5

f276498ca3368e3b3cae395669c90113
SHA1

3959fe3c96c57e28009b09d20386e8e87b730479
SHA256

941ed418d8b00521ffef714afcf38d5c85bfc708b32b2e113c743e6aecfc203d
SHA512

cad6ab73ac04daabf1620ada048f9856ff1edc3e541d0af612460ebcfaf5da39c82202eca59faa066e6a8fbfd2323a020722b953716cbb2236016a7ac16c6090
SSDEEP

3072:z8qeqDUP9qIBQUnwQNUWQTGHXikSh/8r5pvEz/GtelvG3s:zReq09qIWUJuGHX+Or5iz+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f276498ca3368e3b3cae395669c90113_JaffaCakes118

Files

f276498ca3368e3b3cae395669c90113_JaffaCakes118
.exe windows:4 windows x86 arch:x86

833960a52764cc61bdbd71ea22c6fef4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

msimg32

AlphaBlend
TransparentBlt

kernel32

GetLocalTime
GetCalendarInfoA
CreateFileW
FlushInstructionCache
SetCurrentDirectoryW
ExitProcess
EnumResourceNamesA
LockResource
FindFirstFileW
SetFilePointerEx
GetCurrentDirectoryW
GetProcessAffinityMask
FindResourceExW
GetPriorityClass
LoadResource

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ