5c79642672def366829fad960472ace6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c79642672def366829fad960472ace6_JaffaCakes118
Size

182KB
MD5

5c79642672def366829fad960472ace6
SHA1

ce12946eebdfc59bd109b46ac86abc33182754d2
SHA256

0bf50e6f6c75b0e7851ca8230fea56d167ddcf5f1d9e70a1276bd983243d139a
SHA512

614ff2b12cf52837ed9d63da04904bc804490f2cb982cc74de279cbdbffd4888ac5af13bf58b82d0488905f89e2bd7f1778e53cbf950980e31b9b2522edbe76f
SSDEEP

3072:L88ESzk3bzojSBELvUaYXpNuu0zubXw+LAQO70F36R0eimEzKk:g8BcnojdLvUaY6u0qDXR14H9l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c79642672def366829fad960472ace6_JaffaCakes118

Files

5c79642672def366829fad960472ace6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24be35b8b241cf9f07526f6b3d42d31a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

gdiplus

GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage

kernel32

FlushInstructionCache
LocalFree
ExitProcess
LoadLibraryW
ExitProcess
SetLocaleInfoW
GetVersionExA
LocalAlloc
GetModuleFileNameA

winmm

timeGetTime

user32

ClipCursor
DestroyMenu
RedrawWindow
FindWindowA
CreatePopupMenu
TrackPopupMenuEx
GetDesktopWindow

rpcrt4

I_RpcFreeBuffer
UuidCreate

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ