3ff89aa7886085bc718f0e30de918fb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ff89aa7886085bc718f0e30de918fb0_JaffaCakes118
Size

187KB
MD5

3ff89aa7886085bc718f0e30de918fb0
SHA1

7ac4d364e4d9c8a7d26a1b99ffd0e943b745c9ae
SHA256

c5de5a18c67e1b1558e625738aca2f0af3b1bfbb71b08f1fefd9c958ed2416d7
SHA512

9fdfe511eabdde185607e8e0469efb145d9251c86250b205cd29ac74ea6d7b2b829ebf063c2354462d7219878badd40d50a4deaf9b50233e0175a556fd979401
SSDEEP

3072:0FMEy6Ijbp5cgMTZrtJYjum1BiNDYcbXpEzTNmZzMGD31Ya6LtpXn0zlrHRG:0aECbp5c3xoDBiNDrYkzMG6pLtpX0zJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ff89aa7886085bc718f0e30de918fb0_JaffaCakes118

Files

3ff89aa7886085bc718f0e30de918fb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5457721cec853cd5e7498a1b4b3b6177

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
CreateCompatibleDC
CreateDCW
BitBlt
CreateDIBSection
GetObjectType
StretchBlt
DeleteDC
SetStretchBltMode
LineTo
CreatePen
CreateBitmap

msimg32

AlphaBlend
TransparentBlt

user32

FindWindowA
RedrawWindow
TrackPopupMenuEx
CreatePopupMenu
DestroyMenu
ClipCursor
GetDesktopWindow

rpcrt4

I_RpcFreeBuffer
UuidCreate

winmm

timeGetTime

gdiplus

GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipDisposeImage

kernel32

FlushInstructionCache
LoadLibraryW
LocalAlloc
ExitProcess
ExitProcess
SetLocaleInfoW
LocalFree
GetVersionExA
GetModuleFileNameA

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ