f473108cf06539bcb162674a2c6a3534_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f473108cf06539bcb162674a2c6a3534_JaffaCakes118
Size

11KB
MD5

f473108cf06539bcb162674a2c6a3534
SHA1

f5f0e8c602514c9bb040885b241b01e407690f99
SHA256

cb7d3655755b6ed04b4b8522204f8e088d7547c6046a6cd6558742139283cfa0
SHA512

5c4e606d7c55948c7f95f2bc8e1d7f454e9402110ae67786bf0c941b11560d8ea21aa74ca30fe3df486350d7698216615f304e80b602ae1ca05cbce32a2d092a
SSDEEP

192:VjOE9UyBiVSbbNBjzXqxJneY0MS87MPbL0ZMccM713znurY+AodR/PNkf:xzUyB+KbTGxJnD0MS/PCMch7JurY+hRK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f473108cf06539bcb162674a2c6a3534_JaffaCakes118

Files

f473108cf06539bcb162674a2c6a3534_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ce8456671d12e55c6399147c70f65f44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

LoadAlterBitmap
CommDlgExtendedError
GetFileTitleA

gdi32

GetObjectA
GetGlyphIndicesA
GdiComment
GetCurrentObject
GdiGetBatchLimit

comctl32

LBItemFromPt
ImageList_Draw
ImageList_Add
ImageList_Duplicate
ImageList_Read

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE