f4b1f992b32a8458f3740b7dd32c8648_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4b1f992b32a8458f3740b7dd32c8648_JaffaCakes118
Size

207KB
MD5

f4b1f992b32a8458f3740b7dd32c8648
SHA1

3db93c8ede3a6be092dfacbab127ec5d1cc6ad51
SHA256

983a9c96078628f7dc0b96d30bf78b90e7bcef5258ce42000464765a7fce90f6
SHA512

753200eea1c5df579ad2f8d290410f7d3e50143eccb311a779562c4adbc349b7865440d7dd9903ea01b50f358817716aa49b857e08712ab4642f7ba5cada5622
SSDEEP

6144:0OaVIRvdKHbK8SJWHlD5mOCP9FPAcRqW9cz/n:p2LcyD5HCfAKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4b1f992b32a8458f3740b7dd32c8648_JaffaCakes118

Files

f4b1f992b32a8458f3740b7dd32c8648_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ca627e445b2978b8fd90b1b67c9b82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateCompatibleDC
CreatePenIndirect
GetCurrentPositionEx
GetTextAlign
GetClipBox
CreatePalette
GetDCOrgEx
GetBkColor
GetBitmapBits

user32

CharLowerA
IsCharLowerA
LoadBitmapA
GetMenu
LoadStringA
LoadKeyboardLayoutA
LoadIconA

kernel32

LoadLibraryA
GetFullPathNameA
VirtualAllocEx
ExitThread
GetLastError
GetFileSize
IsBadHugeReadPtr
GetFileType

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA

advapi32

RegDeleteValueA
RegQueryValueA
GetLengthSid
RegLoadKeyA

Exports

Exports

_NRiDWhrqLN
_HDX5fNhgysr@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ