366fbb5c1f6fb5c3f0c6cfe6103fe275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

366fbb5c1f6fb5c3f0c6cfe6103fe275_JaffaCakes118
Size

177KB
MD5

366fbb5c1f6fb5c3f0c6cfe6103fe275
SHA1

6076235a040a39a2909ada777d3519828c7ed6ce
SHA256

c126aced854620fab6544e09304b2759eda7a16c6f6bf820dee375467d3e0f50
SHA512

21b605e1c0d7ee95cb8e13adb371d80d21098f60a94d5e3942c2f46a81ee76ccee586dab8ad8b1c49ae3955480bd7791cf85161325e26c2993b1fac39e7b749c
SSDEEP

3072:jQMNIXh9vxrqzWiSpVHuRLoUTpqeamhCvbr/F2Lj6JLHFB8g1Xgf90ur3ZH6ku8h:jzIXhZ0cVHuR88qBfvbr/ua/Ptgf90uH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
366fbb5c1f6fb5c3f0c6cfe6103fe275_JaffaCakes118

Files

366fbb5c1f6fb5c3f0c6cfe6103fe275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

798dd03977cf54ad435c2dc0e8247e8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetInputState
GetDesktopWindow
GetMessagePos

gdi32

GetStockObject
ExcludeClipRect
BeginPath
SelectPalette
GetDCOrgEx
GetDeviceCaps
SetViewportOrgEx
MoveToEx
EndDoc
EndPath
GetPaletteEntries
SetTextColor
SetBkMode
GetTextMetricsA

kernel32

GetLastError
GlobalFindAtomA
lstrcmpiA
GetCurrentProcessId
GlobalFindAtomW
GetModuleHandleW
lstrlenA
GetCommandLineA
SetCurrentDirectoryA
RemoveDirectoryA
IsDebuggerPresent
DeleteFileW
DeleteFileA
GetTickCount
GetConsoleOutputCP
GetUserDefaultLangID
GetModuleHandleA
lstrcmpiW
GetCommandLineW
VirtualAlloc
GetCurrentProcess
GetACP
GetProcessHeap

comctl32

InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ