f82a7de0c21ca988328e1129570e4f69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f82a7de0c21ca988328e1129570e4f69_JaffaCakes118
Size

89KB
MD5

f82a7de0c21ca988328e1129570e4f69
SHA1

82483d2deffbb03cfe09f05b577c9195b13eb5f9
SHA256

b6031fbbd468b3eea54b654ef581350e97f64ac21dc156a1e8d2c03268e32274
SHA512

51f5c1f71d296ba632599fc192f780b9498d485af2cfcdef9bd7e9f48fe8a370576f9f6d8758f2c64653d052ff5cb6c1e15f911f1b4d327c2282b12064317913
SSDEEP

1536:v1OrYhOQ+U2iGtbo6uwAZR8oWT6u/4c8ptMPyLT1xDVVCv0pu1rooeWhccX:v1OrYZV2+dwA0ony8ptMPGHVVGqlWhcU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f82a7de0c21ca988328e1129570e4f69_JaffaCakes118

Files

f82a7de0c21ca988328e1129570e4f69_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e0d67fda2a696cb2a2fc05aea973ff95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
VirtualAlloc
GlobalAlloc
VirtualFree
ExitProcess

gdiplus

GdipCreateHBITMAPFromBitmap
GdipGetImageWidth
GdiplusStartup
GdipCreateBitmapFromStream
GdipGetImageHeight
GdiplusShutdown
GdipDisposeImage

gdi32

DeleteObject
GetDIBits
DeleteDC
CreateCompatibleDC

ole32

CreateStreamOnHGlobal

comctl32

ord17

ntdll

memcpy

Sections

.text
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ