355cfc288b8f655711ad34c1a72bbb88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

355cfc288b8f655711ad34c1a72bbb88_JaffaCakes118
Size

111KB
MD5

355cfc288b8f655711ad34c1a72bbb88
SHA1

0971a47548b3ae3a5c137451e94bf31400611930
SHA256

66b791d43fad66248e0c07be337f8a81705eb266af77bf672aa010929cbd5dc5
SHA512

0a3194f1fdc1fdf8deee37926901660cb38f2ee4d888705bc9cdad67282da6d5fe5de2266fd13098bd1486be4480519d990d9d2434c8e190d52ce4821c0bf9c3
SSDEEP

3072:OAuyxZWJhaVwq8n6F8BdrFOMLDbv9UYb:EIhwhn6wFfDbFbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
355cfc288b8f655711ad34c1a72bbb88_JaffaCakes118

Files

355cfc288b8f655711ad34c1a72bbb88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE