4d05329835fe8416039f28028a5b565e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d05329835fe8416039f28028a5b565e_JaffaCakes118
Size

1.0MB
MD5

4d05329835fe8416039f28028a5b565e
SHA1

2136df283287414c47738ac7c6def6d4b545c036
SHA256

dbafb7ad9555d349760811ed60a84b6f16c788dc91d068ef0fee374870afcdd5
SHA512

51ff7ac2601cae74de7a9282bd0bffc8de29605cf62141f949463573c402cb380eb833488b18b54324aee7acde573e6e173edd2de243dc197aba06e86039473b
SSDEEP

12288:sgxT+Xs5lLyVr5az4PHJ99roZLea0RpI7FqNlrL+bFGwtH+4QDu4C7V1B3RZOaiw:sy+qoFacPp4ZLe4MOQZ4Qy3793cS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d05329835fe8416039f28028a5b565e_JaffaCakes118

Files

4d05329835fe8416039f28028a5b565e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c052fc66cf728a826a2696d2f52be86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GlobalAlloc
GetCommandLineA
CloseHandle
lstrlenA
lstrcatA
GlobalFree
CreateEventA
GetModuleHandleA
GetStartupInfoA
Sleep
GetFileSize
LocalAlloc
FreeLibrary
LocalFree
lstrcpyA

gdi32

GetDeviceCaps
GetStockObject
ExtTextOutA
MoveToEx
LineTo
GetBkColor
BitBlt

user32

GetSysColor
DefWindowProcA
SetWindowTextA
EndPaint
ShowWindow
GetMessageA
DispatchMessageA
GetClientRect
DialogBoxParamA
BeginPaint
CreateWindowExA
PostQuitMessage
MessageBoxA

msvcrt

toupper
_controlfp
__p__fmode
__p__commode
_XcptFilter
_acmdln
_initterm

Sections

.text
Size: 512B - Virtual size: 437B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ