f69466447da5986d13a70f1166e3cf59_JaffaCakes118 | Triage

Sharing

General

Target

f69466447da5986d13a70f1166e3cf59_JaffaCakes118
Size

431KB
MD5

f69466447da5986d13a70f1166e3cf59
SHA1

9c8eb16cff3e8ac2fae223e367dcc953a40a8365
SHA256

14f75ba266b38ccf8041f234d9a89c59d0df1962d21090606b1fce4099cf4a71
SHA512

029ca578e52763beee87811505674276194e1511821f5120f47619cceab972d7ef681885cb5ac45fde900d2de6f758aa75ae9e7c51ef5bdf376442147d1394ec
SSDEEP

12288:ZM7j6Tbmj3p3jD/6CPIjQCcZzE5mE3BNtBlDDd:ZA8kHiotZzSmENBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f69466447da5986d13a70f1166e3cf59_JaffaCakes118

Files

f69466447da5986d13a70f1166e3cf59_JaffaCakes118
.exe windows:5 windows x86 arch:x86

05ccb036ee828bffcc9258ab45bc733a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
GetFileTime
FormatMessageW
InterlockedIncrement
LZDone
SetCurrentDirectoryW
GetACP

user32

FindWindowW
GetWindowTextW
PeekMessageW
TranslateMessage
EnableWindow

gdi32

BitBlt
GetDIBits
ResetDCW
PlayEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
StretchBlt
SelectPalette
CreateHalftonePalette
GetDIBColorTable
SelectObject
SetBitmapBits
CreateBitmap
CreateCompatibleDC
GetObjectW
DeleteObject
GetDeviceCaps
GetBkColor

msimg32

TransparentBlt

shlwapi

PathAddBackslashW
PathFindExtensionW
PathRemoveFileSpecW
PathCompactPathExW
PathRemoveExtensionW

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ