448188e442c74adf6512b6adf15e3734_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448188e442c74adf6512b6adf15e3734_JaffaCakes118
Size

177KB
MD5

448188e442c74adf6512b6adf15e3734
SHA1

cf61c0c4a557aaeca4b12f3a79930963dc5f5f56
SHA256

9122e1d30eb5cda9b716d549729e2713c71d1bdd56fc2cfc2ba35d03e846413d
SHA512

82e229c96eab59afad58b30cd071cde54ab0f147a486eaf48f7cb2d4b67d9cf2cafdd7343ddd88618b569972ffe07eaeb39b098aa7e5cef080506ebc2cddbc64
SSDEEP

3072:+AClOyqpcHJDfRV4xgdJjxyubWjsCFK48XS23NOTY/+5FqwBDar1/CXY0fxMVCm0:FCMF640nv4QNdOA+KwBA/CXY01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448188e442c74adf6512b6adf15e3734_JaffaCakes118

Files

448188e442c74adf6512b6adf15e3734_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bbc2be74c5badd092d4fe3fa2027b8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
TlsSetValue
TlsGetValue
ExitProcess
GetCommandLineW
GetModuleFileNameA
TerminateProcess
GetCurrentProcess

winmm

timeGetTime

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

msimg32

AlphaBlend
TransparentBlt

user32

DestroyMenu
CreatePopupMenu
RedrawWindow
ClipCursor
FindWindowA
TrackPopupMenuEx
GetDesktopWindow

rpcrt4

I_RpcFreeBuffer
UuidCreate

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ