210ce1b745ffe206665468148481aaac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

210ce1b745ffe206665468148481aaac_JaffaCakes118
Size

37KB
MD5

210ce1b745ffe206665468148481aaac
SHA1

81fa5e22f109650b23e3fe947727ed2ae9ed6046
SHA256

65b1acd048661bc4368839c66286b7d5dca14f7e69dfa96e9d81d27b9e8961fe
SHA512

4ba9271369a8eb73e33c1f88785974b3d9dba28347d3449d692a6e67e870857a0b418d6e2e9b554d55af82175761c6fd7782b1d27ca038e6ed491894c3b08580
SSDEEP

768:/7ueaysG0d1gAIZDIf6D77l1H3o89CvLYMfq0odcKjg8FL:/7uRxpbYDv77lt3o8wvLYMiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
210ce1b745ffe206665468148481aaac_JaffaCakes118

Files

210ce1b745ffe206665468148481aaac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d734c4db4ddee99e4fe18ee1e0aa746a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CheckMenuItem
PeekMessageA
SetWindowTextA
BeginPaint
LoadIconA
LoadCursorA
RegisterClassExA
GetTopWindow
GetDC
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetMenuItemCount
SetMenu
EndPaint
ReleaseDC

gdi32

GetROP2
GetStockObject
SelectPalette
TextOutA
Rectangle

netapi32

NetApiBufferFree
NetApiBufferAllocate

oleaut32

OleSavePictureFile

comctl32

ord321
ord13
ord325
ord320
ord322

kernel32

GetModuleHandleA
EnterCriticalSection
lstrlenA
GetSystemInfo
InitializeCriticalSection
GetCPInfo
HeapAlloc
HeapCreate
GlobalAlloc
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
GlobalFree
LoadLibraryA
GetSystemTime

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE