0007d213acc8f79cdca26922a89b13ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0007d213acc8f79cdca26922a89b13ee_JaffaCakes118
Size

135KB
MD5

0007d213acc8f79cdca26922a89b13ee
SHA1

30ccd6162df3b88206d9e5ff1d56929d967be8c5
SHA256

23a3f062086769a12f9592edc032a3573b2f4c194d9f4b5a341e01c16e3efffa
SHA512

f9fe7a1cbcb078f3d98731534052d8bc7e8e9aa9ea2bba5729b9c350ae9ad19dc15c17c9ce1e7b09040a0cc4ca729f090504c1ae14db948399160f8138dec759
SSDEEP

3072:UWCkEYkvcAjdqCg5IBn+hGQLdJRU3KCry1AMe1Uca+5c:Ovc+T+hGodJ2rrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0007d213acc8f79cdca26922a89b13ee_JaffaCakes118

Files

0007d213acc8f79cdca26922a89b13ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f1d6e6197d81ae504422313614a87aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\lwwooEsAodV\djbbVrpeKxzfne\yqVLHmPdwzi\pdgtbespiMq\IDgcecthv.pdb

Imports

gdi32

GetCharWidth32W
PolyBezier
CreatePolygonRgn
CreateDIBitmap
SetTextColor

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_wtoi
strcoll
_ismbblead
_XcptFilter
_exit
_cexit
memset
__setusermatherr
atoi
__getmainargs

kernel32

lstrlenA
QueryPerformanceCounter
IsValidLocale
lstrlenW
GetModuleFileNameA
GetModuleHandleA
GetPriorityClass
WaitForSingleObjectEx
lstrcpyA
HeapAlloc
LoadLibraryA

user32

ScreenToClient
wsprintfW
IsCharUpperW
AttachThreadInput
MessageBoxExA
DrawAnimatedRects
GetWindowDC
AllowSetForegroundWindow
ValidateRect

shlwapi

UrlEscapeA
ChrCmpIW

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ort
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE