09ec06880547b6d4171370a82c045331_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09ec06880547b6d4171370a82c045331_JaffaCakes118
Size

434KB
MD5

09ec06880547b6d4171370a82c045331
SHA1

78644f50cb3ec9b7812bc4e1d2ef5d42ba77c6a4
SHA256

6b6ab13457276e21b4726789db6c9ec3a11a670bccd0d290651d1a06ad70baf3
SHA512

e1522af2380d94819e3ab26c0f647cb7e9fb015eb9d5256c7844a66da2700f8c5721d13363def69aa40725c7b82adc8b2d9ca04d7bbc94b48e0d7fa174346271
SSDEEP

12288:3z5wPBBFCdviYD6eQzWK01HCFRYseKaKSd1:3zKBBaak6vzWK0eS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09ec06880547b6d4171370a82c045331_JaffaCakes118

Files

09ec06880547b6d4171370a82c045331_JaffaCakes118
.exe windows:5 windows x86 arch:x86

05ccb036ee828bffcc9258ab45bc733a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
GetFileTime
FormatMessageW
InterlockedIncrement
LZDone
SetCurrentDirectoryW
GetACP

user32

FindWindowW
GetWindowTextW
PeekMessageW
TranslateMessage
EnableWindow

gdi32

BitBlt
GetDIBits
ResetDCW
PlayEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
StretchBlt
SelectPalette
CreateHalftonePalette
GetDIBColorTable
SelectObject
SetBitmapBits
CreateBitmap
CreateCompatibleDC
GetObjectW
DeleteObject
GetDeviceCaps
GetBkColor

msimg32

TransparentBlt

shlwapi

PathAddBackslashW
PathFindExtensionW
PathRemoveFileSpecW
PathCompactPathExW
PathRemoveExtensionW

Sections

.text
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ