370e3c5deee2d27a53d4f7da5e5e8bc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

370e3c5deee2d27a53d4f7da5e5e8bc7_JaffaCakes118
Size

117KB
MD5

370e3c5deee2d27a53d4f7da5e5e8bc7
SHA1

ef028a0146449834bcb06e7a07395e0ee5a74432
SHA256

2b183be9fe0683b6b85a8a5202ed6bb17c995ff4e76bb4f7b021836783ff9345
SHA512

639c9205c5a69a0739fde75a37174e702cba2e0f3848a17149d024d94928811505588f42eabd2fbde09e65a5aac19bcbf56a3d37b9aaee5639562a4eb5162a88
SSDEEP

3072:VjAkB5u8vrZY/s4hvD6m/gdb6l2APUJR2:V0MuCr+FhvD6R+5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370e3c5deee2d27a53d4f7da5e5e8bc7_JaffaCakes118

Files

370e3c5deee2d27a53d4f7da5e5e8bc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd3d8482e7b17c314a7767a4426fb0e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CreateWaitableTimerA
DeleteFiber
DuplicateHandle
GetCurrentThread
CloseHandle

gdi32

CreateSolidBrush
DeleteColorSpace
CreateBrushIndirect
CreateDCA
CreateHatchBrush
CancelDC

user32

MessageBoxA
CreateIconFromResource
CopyIcon
BringWindowToTop

Sections

.text
Size: 70KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE