190dc93320c26d2a524afc0703ecfd3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

190dc93320c26d2a524afc0703ecfd3f_JaffaCakes118
Size

203KB
MD5

190dc93320c26d2a524afc0703ecfd3f
SHA1

3b0824338c3bb260ab1c20e36bf779c38cb450c0
SHA256

fd1b307566094f41fe74f5737782669e1840efb6c406474941552a61b9b09199
SHA512

5a1af1004827794880affbc8a4817884e42c61d3c9f819f081a493ece0ba3e5e94cd47b4ab2217c10a0e92417bb0e905d53d5c7b11ff8e322bd9976f5f8fd07e
SSDEEP

3072:EEboIex7JbMRieLJh0ovPaL0qzg5jCNs/qJFw7Kj+O0YPWpk:yIGJbMRLJhVPBnjCa/oSI+i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190dc93320c26d2a524afc0703ecfd3f_JaffaCakes118

Files

190dc93320c26d2a524afc0703ecfd3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

17fcd786e1a308b9ea6dee49dda53938

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AssignProcessToJobObject
CreateIoCompletionPort
LoadLibraryA
LockFile
FreeEnvironmentStringsW
SizeofResource
AttachConsole
VirtualAlloc
GetProcAddress

user32

GetMenuState

gdi32

LineTo
StrokePath
CreateCompatibleDC
BitBlt
GetTextCharsetInfo

Exports

Exports

bubanuvf
qcfjqjrs
rrurghqqjfdisc

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ