304d20c61d54f849b6dd6e0536772144_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

304d20c61d54f849b6dd6e0536772144_JaffaCakes118
Size

180KB
MD5

304d20c61d54f849b6dd6e0536772144
SHA1

099bb86a0c2cb055697185e831f379eae25162ca
SHA256

79444fbcbbd2623d90621a90571775b12713ef9b2cbb1eea3c75884cf5ed6340
SHA512

51101e5030ca94ecb15f87cef217a3a539d3aadefdb4ee32597daf904cb2e9bcde7d74504465673a2fbeba7e28ec67c4fb225a70baab1e2bb56a88e8ea381da1
SSDEEP

3072:TilU+qRvlOKiMM+adhMRTwOQ+1ZY7LTUnx+rJS9lbHaBE2BP3Sx:7jRlWhMRTwOHY78x/ToE2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304d20c61d54f849b6dd6e0536772144_JaffaCakes118

Files

304d20c61d54f849b6dd6e0536772144_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab5f43fc7a0ddcf6535948d06514d8b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCreateBitmapFromFile
GdipGetImageWidth
GdipGetImagePixelFormat
GdipGetImageHeight
GdipDisposeImage

kernel32

FlushInstructionCache
LoadLibraryW
ExitProcess
GetVersionExA
ExitProcess
SetLocaleInfoW
LocalAlloc
LocalFree
GetModuleFileNameA

msimg32

AlphaBlend
TransparentBlt

rpcrt4

I_RpcFreeBuffer
UuidCreate

user32

CreatePopupMenu
DestroyMenu
ClipCursor
RedrawWindow
TrackPopupMenuEx
FindWindowA
GetDesktopWindow

winmm

timeGetTime

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ