4d52fd3b4fdc3c01624928607c98d027_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d52fd3b4fdc3c01624928607c98d027_JaffaCakes118
Size

123KB
MD5

4d52fd3b4fdc3c01624928607c98d027
SHA1

e77498b02f9ca0242849640124ee0bb1142f1432
SHA256

d85e31226e1304e229e332e625ba92255d4f227a274b24863094c0b5c9623fde
SHA512

25e6ee81ae1356f43380d55cf8cecd433a5da938c59dc1f6f449b5c2826ab79dfac6b1f598e7af94f7e3b4c15438e9b54544df7cf45df9afa72f035d58b0eeea
SSDEEP

3072:s9WnYVCDN+l0S8r+GX6iyA3ONmZwXWDQxyjV9dyMEcNdOfXqx:s8Y2Nzd+J/BMyWDQbc8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d52fd3b4fdc3c01624928607c98d027_JaffaCakes118

Files

4d52fd3b4fdc3c01624928607c98d027_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2923fbf7a20a072cd7f8a58982cd9b07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetMenu
GetDesktopWindow
GetScrollRange
GetScrollPos
GetCapture

kernel32

GlobalFindAtomA
ExitProcess
GlobalAlloc
GlobalDeleteAtom
LoadLibraryA
VirtualAllocEx

gdi32

GetClipBox
GetDCOrgEx
GetBitmapBits
GetBkMode
GetBkColor
GetTextColor

msvcrt

sqrt
wcscspn
memcpy
exit
memset
wcsncmp
swprintf
time

Exports

Exports

_9l3jZzif
Bkdug01QZ@16
n8yJNmKYj46FX
BuxTdb@20

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ