4dbc4b094b789d8f0cfe48e552b2ac9f_JaffaCakes118 | Triage

Sharing

General

Target

4dbc4b094b789d8f0cfe48e552b2ac9f_JaffaCakes118
Size

42KB
MD5

4dbc4b094b789d8f0cfe48e552b2ac9f
SHA1

984ca133b1db7ce3b24bb31fed5c84ed43c59926
SHA256

15ddc2427bb2e867e366ae404c24390cd7f87127f80830b40bd8b0e222eac14f
SHA512

1665acbd0bbffede5c15d2c540548afcda032125529d57c2c1ea040ab895c66b732b08cb810521f3871cb39ee8bc5d813393c489e3d856e68a6d5449732d555a
SSDEEP

768:36Esy4oMuVJ9UFAp5v32pk9M7dZOJZBCN2T328Ro9H/auPl6eQPF0WABg:psH8OFA7K7dya2G4o9RP6PFbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dbc4b094b789d8f0cfe48e552b2ac9f_JaffaCakes118

Files

4dbc4b094b789d8f0cfe48e552b2ac9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a927e40423a382e7f99ea1a698a89863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
CreateThread
InterlockedIncrement
InterlockedExchangeAdd
InterlockedDecrement
InterlockedExchange
GetCurrentProcess
GetTickCount
GetProcAddress

user32

GetMessageA
CreateWindowExA
RegisterClassExA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetCursor
GetActiveWindow
FindWindowA

gdi32

GetBkColor
SetBitmapBits
GetObjectType
ResizePalette
CreateSolidBrush
SetGraphicsMode

Exports

Exports

?AJifoijfsc@@YAHHPADHH@Z
?AJifoijfsh@@YAHHPADHH@Z
?AJifoijfsi@@YAHHPADHH@Z
?AJifoijfsm@@YAHHPADHH@Z
?AJifoijfso@@YAHHPADHH@Z

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ