24d3cb71bc813d2cb529738ff4a9fcff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d3cb71bc813d2cb529738ff4a9fcff_JaffaCakes118
Size

186KB
MD5

24d3cb71bc813d2cb529738ff4a9fcff
SHA1

904d6e93ebaf0e225d7584130df0bcd054e1f027
SHA256

bb26f957ba8d2ffdf96ca700693465c3b8776cdc5f895f0c96b20902f5b1a3c8
SHA512

5963e9c95d6b6a7c8326a8f46c8d1dd6291bc81661fd7fd2921e86900a79039b2fdfdcf12ff9c04378488fc2b8fcfcc193fa9fbf00d7caf618f22eb0a1f992e1
SSDEEP

3072:yG7A6MdOwdtB35R3Z/7x1xYS+nwly4qe+hQ9qzD8dQhhscnUzXxiJZJ9DpP3yqL4:vAf4ml7x1+PnR7OczAYhsTxQLFP3yUPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d3cb71bc813d2cb529738ff4a9fcff_JaffaCakes118

Files

24d3cb71bc813d2cb529738ff4a9fcff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57e1ced935ea4d0e67701660db803256

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipDisposeImage

rpcrt4

I_RpcFreeBuffer
UuidCreate

kernel32

FlushInstructionCache
LocalAlloc
LocalFree
LoadLibraryW
ExitProcess
SetLocaleInfoW
GetVersionExA
ExitProcess
GetModuleFileNameA

user32

TrackPopupMenuEx
DestroyMenu
ClipCursor
CreatePopupMenu
RedrawWindow
FindWindowA
GetDesktopWindow

winmm

timeGetTime

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ