484ae5646ec3e9ad638fd9583d59a696_JaffaCakes118 | Triage

Sharing

General

Target

484ae5646ec3e9ad638fd9583d59a696_JaffaCakes118
Size

1.3MB
MD5

484ae5646ec3e9ad638fd9583d59a696
SHA1

6cf640b8e7bbfb6d3e7a4a8332675638d3ce8ee1
SHA256

bcc6b98ca1267c727f22e835cc4a6a1148dff3ae3d58706ad74b2a4fc444251b
SHA512

bd53fe137fe16a7e288dc29783f569bcc7a734b2e772cb88ce8ad85edd32a71842f94dd1b832cf85bf7c606a03118aed5c05c31fd5b02808c1defb3514c8d1b6
SSDEEP

24576:3k/VVN2tu/t3zzlVvtNk8SzxdfRnBu+9+0ySZNWWWS0liDVlVvtN:3mZsu/t3TvmzxdfRBu+9ISDv0lCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
484ae5646ec3e9ad638fd9583d59a696_JaffaCakes118

Files

484ae5646ec3e9ad638fd9583d59a696_JaffaCakes118
.exe windows:5 windows x86 arch:x86

535c54031f0f7284a5ccdb44fadffd65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetVersionExA
GetLastError
InitializeCriticalSection
VirtualAlloc
OpenFileMappingA

user32

LoadBitmapA
SendNotifyMessageA
DrawFocusRect
ChildWindowFromPointEx
LoadBitmapW
GetDC

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ