66b965283796ac742dc544f066c58350_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b965283796ac742dc544f066c58350_JaffaCakes118
Size

698KB
MD5

66b965283796ac742dc544f066c58350
SHA1

7aa901c50c391e35544cccf6b62a8c092a15815a
SHA256

c105e50999c476d2aeb39b0bb66e71314d30a191ff98f60cbcab1f1b17271c76
SHA512

88d36c8d3df174e8e350103b210e4ee4b11d688c9b5fca76841dc63c31958abd08fa5fe85fdaa6d2ca9821a50b3967a2abc2d4b4c1224bece3b932d1ca8dd811
SSDEEP

12288:J5x0OdnJMm3HVCqkWz34EQDCv1hzj8mqjM:/x0OkWWOv1VNqjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b965283796ac742dc544f066c58350_JaffaCakes118

Files

66b965283796ac742dc544f066c58350_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f70508dffea825fb274b48a125690e5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetVersionExA
GetStartupInfoA
FreeLibrary
GlobalAlloc
LocalFree
lstrlenA
GetTickCount
Sleep
GetFileSize

gdi32

CreateCompatibleDC
LineTo
SetBkMode
GetStockObject
ExtTextOutA
GetTextExtentPoint32A
BitBlt

user32

GetFocus
GetWindowRect
DefWindowProcA
EndPaint
CreateWindowExA
MessageBoxA
GetClientRect
TranslateMessage
GetSysColor
DestroyWindow
SetWindowTextA
DialogBoxParamA
SetFocus

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ