170a040ff62647662da39a1a1b696f9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170a040ff62647662da39a1a1b696f9a_JaffaCakes118
Size

69KB
MD5

170a040ff62647662da39a1a1b696f9a
SHA1

805da409cd3e93af1989801d33fb76611b604634
SHA256

0238a8f46bfbe331a603fa0085adbb3480615826de147e56997c08c050baf347
SHA512

d1a7bf29f222df54fc03372b42e3b466f55e795f8100cf0130efa08e302ff33a6ec2d0b23de4d20378e81482cdb435208d8d4e21fd1486a3ca245fa793796149
SSDEEP

1536:e9yEscQfVbLYCXjIrbPbv0h+Ucimimbz7UrWqR:e9yE2Vb0S2bPDgkmIu3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
170a040ff62647662da39a1a1b696f9a_JaffaCakes118

Files

170a040ff62647662da39a1a1b696f9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

424540acd2300e4ac761ee1a5aed6191

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextColor
GetBitmapBits
CreatePalette
CreateFontIndirectA

kernel32

MoveFileA
MulDiv
LocalAlloc
LoadLibraryA
ExitProcess
GetProcessHeap
VirtualAllocEx

user32

IsWindowEnabled
IsChild
GetTopWindow
GetScrollRange
GetDesktopWindow
GetSysColor
GetCapture
GetScrollPos
LoadBitmapA
GetSysColorBrush
GetSystemMenu

Exports

Exports

_sp6r1
_OBC44
_3JullOeH3ybd@8
lzWMB0Grd3iXp
_X1qb04P7
_rxGMNWNwRTn
_fhYYSH54KEcEq@8
VSvXgAT@16
_sGaWVG89BeJi@4
_rIX7SRqpdH
_SZDgMnlt0Vn
_ff6tEPJJNDc
_3fbtK_8q
4vE2S9L_Zlzl@16
_bYmBv8ElAhP66
9W8lmyUYtJ@20
_rEPDRu4n@24
_0PJpbV9kC9U@24
ko69ktyM150ta@8
_ODXNEBxyqjb9c@16
_eQh9c2nOwyDcM@4
_wa0EO4cL@8
_Px8gn_3E@20
VdZsqkAw@20
8HNCA94KTT@24
YOQ7EfMwc@4
FbE_Gk

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ