375ea7d5c9b7a0c5f877a3860925b58c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

375ea7d5c9b7a0c5f877a3860925b58c_JaffaCakes118
Size

124KB
MD5

375ea7d5c9b7a0c5f877a3860925b58c
SHA1

54df9faa92edd1d295aeee4082512c2f6837a514
SHA256

ce9b901afcf9d2e5f4a5d9b038d349bbede31bb0af1d46006ccba1da86794740
SHA512

6e14c001f13eee41233d6037cb2a07e76006abc9c40885cab589feeaf6d3cd8b741891dfe226f4c8f5497a9d080749335fc3fb5bd8b00b1abefdf11e1093e916
SSDEEP

3072:S+0mcXinO63YdJhMA6QeszabPuScdRwIfDVv:dcXinOHEQewabPVcdmIfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
375ea7d5c9b7a0c5f877a3860925b58c_JaffaCakes118

Files

375ea7d5c9b7a0c5f877a3860925b58c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f48ff5d58f2f51d18959ff793b53ce1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA

gdi32

GetBitmapBits
GetBkColor
CreateCompatibleDC
CreatePalette
CreateDIBSection
CreateFontIndirectA
GetDIBits
CreatePenIndirect

user32

LoadIconA
FrameRect
IsMenu
CreateMenu
GetMenu
GetActiveWindow
GetCapture
IsChild

kernel32

LoadLibraryA
GetCommandLineW
GetModuleHandleW
GetCurrentThread
IsBadReadPtr
ExitProcess
VirtualAllocEx
lstrlenW
IsBadHugeReadPtr

comdlg32

GetOpenFileNameA

Exports

Exports

_DQBciIDiF@24
E33Ao@12

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ