2daafdf640a699f23cdf416a2c862830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2daafdf640a699f23cdf416a2c862830_JaffaCakes118
Size

178KB
MD5

2daafdf640a699f23cdf416a2c862830
SHA1

104fe808e782edfaf05d23d21c91af86cea87f6f
SHA256

e7a0352ac373b0f809d85c77da8b2a7b741585011036d39fed9b819fd687cfee
SHA512

f58f71b0164415fdad2871bf8b00549bcfd35eac6b52971b93e6df4d2f9a151f603e10e8d4970a62b085707196ee8fd265ad7b1f28ca3189da1eb0938588ae96
SSDEEP

3072:ODA/t1NDVrLlvvDOOfdQKcJ7luy73yQSiCbANFrA8EvUTx6:OCt1nR6OfdodIDRISWT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2daafdf640a699f23cdf416a2c862830_JaffaCakes118

Files

2daafdf640a699f23cdf416a2c862830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb3de5e8a18f20694e75b25e98e9679c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
LoadLibraryW
LocalAlloc
GetVersionExA
ExitProcess
SetLocaleInfoW
LocalFree
ExitProcess
GetModuleFileNameA

winmm

timeGetTime

rpcrt4

I_RpcFreeBuffer
UuidCreate

gdi32

GetObjectType
CreateDIBSection
CreateDCW
CreatePen
SetStretchBltMode
DeleteDC
SelectObject
CreateCompatibleDC
BitBlt
StretchBlt
LineTo
CreateBitmap

gdiplus

GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage

user32

CreatePopupMenu
DestroyMenu
FindWindowA
TrackPopupMenuEx
RedrawWindow
ClipCursor
GetDesktopWindow

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ