305c34ec03fd03cbf0194965944d63d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

305c34ec03fd03cbf0194965944d63d5_JaffaCakes118
Size

98KB
MD5

305c34ec03fd03cbf0194965944d63d5
SHA1

d294f9f55f68c54a9501a0dd60ff474b4d66fcd8
SHA256

49266e55b6d4aa4230c79adeb363405203cc04718795897218c40255554f4fa4
SHA512

5649a860197f8786913a275a7ae27e71a651ffab243f9e640697ec2532261ff313ea2c252baa6d865d8277df20805ea105ab5ef27b861eef1bae60df90c74845
SSDEEP

1536:vdHUkWWWuByt6/H3fTCDi2u95uSFMfEao32ewMn40/+7M1:vtUT8pTCDi2u3DFMfEB3R4e+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305c34ec03fd03cbf0194965944d63d5_JaffaCakes118

Files

305c34ec03fd03cbf0194965944d63d5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d47ba4575811bd678a9712e2a39c0f91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\nApxqsjQ\SlqgxkuaYw\iyrpUeGrNpr\fVssfakYpckF\gjoECzmMKVjihl.pdb

Imports

gdi32

CreateSolidBrush
GetTextExtentPoint32A
GetClipBox
SetDIBits
GetTextExtentPointW
EndDoc

user32

DefWindowProcW
IsCharUpperW
GetForegroundWindow
SendDlgItemMessageW
AppendMenuW
GetLastActivePopup
KillTimer
MonitorFromRect
wsprintfW
GetScrollInfo
GetWindowDC

shlwapi

ChrCmpIW

kernel32

LoadLibraryA
CreateWaitableTimerA
lstrlenA
GetLocaleInfoA
GetModuleFileNameA
OpenFileMappingW
LoadLibraryExA
CreateWaitableTimerW
GetModuleHandleW
GetCommState

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
strlen
strcoll
setlocale

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xyz
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE