2590fdeedadb86f940d84c25a5f51398_JaffaCakes118 | Triage

Sharing

General

Target

2590fdeedadb86f940d84c25a5f51398_JaffaCakes118
Size

123KB
MD5

2590fdeedadb86f940d84c25a5f51398
SHA1

8ab93effd981433ac547291492822aba86efbeef
SHA256

455be811fd61e5c60762f6f60f5d193549c042c2eacd4b7d80ab1aef2322ed0b
SHA512

db536ee562aa9db1b192408f23da865d05858835fa757864aad1dd7ca4607858b80a350eddf3a4095f0d087d69797096480449ffcbd5d41a2450b46f0e9c06e2
SSDEEP

3072:s9WnYVCDN+l0S8r+GX6iyA3ONmZwXWDQxyjV9dyMEcNdOfXqa:s8Y2Nzd+J/BMyWDQbc8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2590fdeedadb86f940d84c25a5f51398_JaffaCakes118

Files

2590fdeedadb86f940d84c25a5f51398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2923fbf7a20a072cd7f8a58982cd9b07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetMenu
GetDesktopWindow
GetScrollRange
GetScrollPos
GetCapture

kernel32

GlobalFindAtomA
ExitProcess
GlobalAlloc
GlobalDeleteAtom
LoadLibraryA
VirtualAllocEx

gdi32

GetClipBox
GetDCOrgEx
GetBitmapBits
GetBkMode
GetBkColor
GetTextColor

msvcrt

sqrt
wcscspn
memcpy
exit
memset
wcsncmp
swprintf
time

Exports

Exports

_9l3jZzif
Bkdug01QZ@16
n8yJNmKYj46FX
BuxTdb@20

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ