312c6640f76fd205a71c8bd9e472c6d7_JaffaCakes118 | Triage

Sharing

General

Target

312c6640f76fd205a71c8bd9e472c6d7_JaffaCakes118
Size

187KB
MD5

312c6640f76fd205a71c8bd9e472c6d7
SHA1

4dfd6c85d2b4e7259ab9abd82e28757923d81900
SHA256

7ea337d9057bae9d08d6dec6253bcb7c08d4c32a653dc1a5fc2ea983a1d2cfc2
SHA512

5c6c78b12aab5cb23f84543db2894ce7a8995e79a61e32ab2f9993906d4f178cabb58d375019dc4c196c238c9406677612b23aa45166ffd96e91aab25e62bee1
SSDEEP

3072:0FMEy6Ijbp5cgMTZrtJYjum1BiNDYcbXpEzTNmZzMGD31Ya6LtpXn0zlrHRG:0aECbp5c3xoDBiNDrYkzMG6pLtpX0zJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
312c6640f76fd205a71c8bd9e472c6d7_JaffaCakes118

Files

312c6640f76fd205a71c8bd9e472c6d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5457721cec853cd5e7498a1b4b3b6177

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
CreateCompatibleDC
CreateDCW
BitBlt
CreateDIBSection
GetObjectType
StretchBlt
DeleteDC
SetStretchBltMode
LineTo
CreatePen
CreateBitmap

msimg32

AlphaBlend
TransparentBlt

user32

FindWindowA
RedrawWindow
TrackPopupMenuEx
CreatePopupMenu
DestroyMenu
ClipCursor
GetDesktopWindow

rpcrt4

I_RpcFreeBuffer
UuidCreate

winmm

timeGetTime

gdiplus

GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipDisposeImage

kernel32

FlushInstructionCache
LoadLibraryW
LocalAlloc
ExitProcess
ExitProcess
SetLocaleInfoW
LocalFree
GetVersionExA
GetModuleFileNameA

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ