e952ca72d045aff44ad8772fa310ed5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e952ca72d045aff44ad8772fa310ed5b_JaffaCakes118
Size

198KB
MD5

e952ca72d045aff44ad8772fa310ed5b
SHA1

2c3163c766a5a978a9e0e3772d9c23f019710a99
SHA256

dd0561efc00973e2f77ab837ba5f9f7245209797e7b3c950900751fad9889de7
SHA512

04553a30cee45c176f1806e21d045f5d4eae565026e220d5f712760e8add2efd51251dc48055354e21bbe1524023680d825c73993a8d8ee52edc8d56f8e7f812
SSDEEP

6144:S6tpZlwtZnCQwWsf6YX/Hx6KQIdNj8uH5DtfjwoipQ:SWLlkCpj4ZWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e952ca72d045aff44ad8772fa310ed5b_JaffaCakes118

Files

e952ca72d045aff44ad8772fa310ed5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33083ed183f8fab8e28775ebc57d84b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle

ntdll

RtlCreateQueryDebugBuffer
RtlRemoveVectoredExceptionHandler
RtlGetActiveActivationContext
RtlIntegerToUnicodeString

advapi32

RegDeleteKeyA

gdi32

GetNearestPaletteIndex
GetMetaRgn
GetFontData
GetDeviceCaps
EndPath
GetPixel
GetSystemPaletteUse
StrokePath
SetRectRgn
SetPixelV
SetPixel
GetTextAlign
CreateScalableFontResourceA
CreateHatchBrush
CreatePen
DeleteObject
SetBkColor

comctl32

RemoveWindowSubclass

wmvcore

WMCreateWriter

Exports

Exports

KBmol

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1009B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ