32753d6a30898145a2d741a184f972eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32753d6a30898145a2d741a184f972eb_JaffaCakes118
Size

172KB
MD5

32753d6a30898145a2d741a184f972eb
SHA1

e7b42c920792ed5725f4b0d67b29cca07dbdb279
SHA256

322be5cca506f749fcffa98880d6470e114970d2a67655e1beaf821ef38a966d
SHA512

0ff6c81fe3eee3305b6713fd97b60199edd21cdd269c9e8d18eda61d556c3e15e6ef3a393e9c5b40fd10449d885c9c13c895d173a2ba13e1030a2197efe71288
SSDEEP

3072:dpwx915IsjyQk0U76aBcpm0wMFUNTvASR4x5/eBm5Uof4xcr1Muh:deyQc6zpdpKNTvwskJh1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32753d6a30898145a2d741a184f972eb_JaffaCakes118

Files

32753d6a30898145a2d741a184f972eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da317b167e44c3a3bcc2ce421631a173

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetMailslotInfo
SetFileAttributesW
GetPriorityClass
ReleaseSemaphore

user32

GrayStringA
SetClassWord
GetKeyNameTextW

advapi32

SystemFunction002
RegOpenKeyExA
QueryServiceStatus
SetKernelObjectSecurity

gdi32

StrokeAndFillPath
GdiGetBatchLimit
SetStretchBltMode
IntersectClipRect
GetNearestColor
BitBlt

msvcrt

_getpid

oleaut32

VarR8FromBool

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ