42f48576283970f95480c68225d72e8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f48576283970f95480c68225d72e8c_JaffaCakes118
Size

38KB
MD5

42f48576283970f95480c68225d72e8c
SHA1

0570d669db287c1abac03dd9a74eb189192e83d0
SHA256

3bba8770274c6806953c9959abf3c44b3f9046b237de89e166f6e14b76ed85ec
SHA512

54da0df9932b188df0851df50f9c6b6f17f109e2ecf2b7e93690cd41aad5d352afa2f343b4e28fe112b8d9256c6b5ceec85a9d74fa78caf53021683470790a69
SSDEEP

768:Veqgq2lH/00vfhjgwbz55GvT0XiamMJaARhFVTkodlhosMp:VeqUPvfhjggzfkTghJayhoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f48576283970f95480c68225d72e8c_JaffaCakes118

Files

42f48576283970f95480c68225d72e8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a80fb251b8eb5e68f025d250a1c32f5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumDesktopsW
DestroyIcon
TileWindows
CreateDialogParamW
UserClientDllInitialize
UpdateWindow
MessageBoxA

kernel32

GetLastError
VirtualProtect
GetStringTypeExA
GetSystemDefaultUILanguage
GetCPInfoExW
BuildCommDCBAndTimeoutsW
lstrcmpiA
CreateMailslotA
GetCommTimeouts

gdi32

GdiFullscreenControl
SetViewportOrgEx
GetTextExtentPoint32A
GetWindowOrgEx
SetBitmapDimensionEx
GetDeviceGammaRamp

comdlg32

GetFileTitleA
PrintDlgW
ChooseFontW

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE