28b27af42f8067311878a8d1443f005c_JaffaCakes118 | Triage

Sharing

General

Target

28b27af42f8067311878a8d1443f005c_JaffaCakes118
Size

179KB
MD5

28b27af42f8067311878a8d1443f005c
SHA1

5edd0e0085b1a55c9c3489160c54a2898d2d734c
SHA256

97a83fc5c4a38d54b3c49e2e33a664183f492867e858747195d4d81c4b4a4882
SHA512

0fa4e8bda475a1d30534628bca1b5330789096f477c1226608a3ecf9c52c60398ddaa614dd4096c0b98654dca063a7666a4a8c75798155d738e78cf3937beea7
SSDEEP

3072:HzdJEtqoxy1doACTXKgFCXZZlIhOdoZUevhT9XJPCJDDNKl51uPCwmOStnN:HRWtqoxACTX8L+n3J6PNKl5YmOSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b27af42f8067311878a8d1443f005c_JaffaCakes118

Files

28b27af42f8067311878a8d1443f005c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b5b5fec155a63630821c3a0aa56fcc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

user32

CreatePopupMenu
FindWindowA
ClipCursor
DestroyMenu
RedrawWindow
TrackPopupMenuEx
GetDesktopWindow

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipDisposeImage

winmm

timeGetTime

kernel32

FlushInstructionCache
LocalFree
LoadLibraryW
GetVersionExA
ExitProcess
SetLocaleInfoW
LocalAlloc
ExitProcess
GetModuleFileNameA

rpcrt4

I_RpcFreeBuffer
UuidCreate

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ