048f0ee71cde4005794fc12a9537ee8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048f0ee71cde4005794fc12a9537ee8b_JaffaCakes118
Size

147KB
MD5

048f0ee71cde4005794fc12a9537ee8b
SHA1

8a68ffffa4f4e8df3163d2ca15c9b4377030c467
SHA256

f7c1944ab80b990064d418e95523cacafefa5977fd5768576fd830802e9ce357
SHA512

204cec28df37bfc2858c777bfe9967882c0c54c63197ab51081ca5aeff6864fc4b51b6d9a53e3b8184b3aef639a8edeb0f5e280dbf12da86cf85a00d6b816fc4
SSDEEP

1536:vifLaL67IjKO9+71gIUoBgG5WeLrdDW1H9Vwz+hvDPrUeqM/kHGAXtB8ROug7/HN:KzaL4Ihdo+wxi1HSGrrs1I56zR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048f0ee71cde4005794fc12a9537ee8b_JaffaCakes118

Files

048f0ee71cde4005794fc12a9537ee8b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2368b8fac5727e9419f60b8f96ebba0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
DispatchMessageA
TranslateMessage
ShowWindow
GetDesktopWindow
GetDC

kernel32

GetCurrentThread
GetDriveTypeA
GetCommandLineW
SetLastError
GetUserDefaultLangID
GetACP
VirtualAlloc
lstrcmpA
DeleteFileW
GetProcessHeap
VirtualFree

gdi32

CreateFontIndirectA
GetDeviceCaps
DeleteObject
SaveDC
SetWindowExtEx
GetClipBox

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Nalftflu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ