69faf2b62ecc0dd90d2f65e6ea73a5d9_JaffaCakes118 | Triage

Sharing

General

Target

69faf2b62ecc0dd90d2f65e6ea73a5d9_JaffaCakes118
Size

196KB
MD5

69faf2b62ecc0dd90d2f65e6ea73a5d9
SHA1

e4a01bb5f73355606e2682c6dd7eaffc4c4b9ca8
SHA256

6e5af2cc362c746a1ac92398857af08af44e957ba6b9376c0f0d6c44371f45cc
SHA512

2ac263b85f15cb42250bffaf03717592221a71e85de5b90de752cd76bf343c7076231b24889e17918ca0a8c99b68cda2b3e545b328b88c2d051915411013b95b
SSDEEP

3072:umqPLbT/DQn7QSHNgJGq7X5lwi/RDKwXm42g8lo2Q+0M6TjWMMPDf4eWFf0Z79:un87r3q7JfRXkTo2+9GMMEeWFf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69faf2b62ecc0dd90d2f65e6ea73a5d9_JaffaCakes118

Files

69faf2b62ecc0dd90d2f65e6ea73a5d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ebc68d9d0384b79afa6f65fc4e46c0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
LocalAlloc
ExitProcess
GetVersionExA
ExitProcess
SetLocaleInfoW
LoadLibraryW
LocalFree
GetModuleFileNameA

winmm

timeGetTime

user32

DestroyMenu
FindWindowA
CreatePopupMenu
ClipCursor
TrackPopupMenuEx
RedrawWindow
GetDesktopWindow

rpcrt4

I_RpcFreeBuffer
UuidCreate

msimg32

AlphaBlend
TransparentBlt

gdiplus

GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ