3818038956e899701c8710ca87ab44fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3818038956e899701c8710ca87ab44fc_JaffaCakes118
Size

115KB
MD5

3818038956e899701c8710ca87ab44fc
SHA1

b39573329704c7749f39027603b92784bbb77b58
SHA256

134a72b36d20976a667849600a196e56c32e67297af6efde2e9ff10663f73fe6
SHA512

a971115cc36d85ed4bade7fa5091cc516a5f73ab1a2733ce75211e11d6d2b5eec78ff5ea3beeba95d4f28911dd6e6d4772fd13e4846e1b7b02ebfadcb9b094ec
SSDEEP

3072:VwUeOVnUFEckGZTMvFvAyBDON/+nGKr3P128/8y:T1YVklvFvDBDONaPA8/8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3818038956e899701c8710ca87ab44fc_JaffaCakes118

Files

3818038956e899701c8710ca87ab44fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oooo
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE