6ab81bf4e81856ba0ed12a51bd2cf761_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab81bf4e81856ba0ed12a51bd2cf761_JaffaCakes118
Size

131KB
MD5

6ab81bf4e81856ba0ed12a51bd2cf761
SHA1

db04e0054037c7c17575b596c970d51aea8c6ce1
SHA256

5bd67f13a39e9177e13bd19ea4b3b77e28c0358eb738e693e046edf9f115eb98
SHA512

abae8b61d2144eb71b725f476c95039ff256f07456480da87a732aa8f6b89ffcfb9bc0b26f5d9034b1d25dfa81beb43184604a0bbd9ecec84d161c7a069af0e8
SSDEEP

3072:Xu/+LL2+z3CuKFm+8V/JaDRID+ClMswVuwFNXwgTs:X3Lx7Cu6mhxURJCjwFNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab81bf4e81856ba0ed12a51bd2cf761_JaffaCakes118

Files

6ab81bf4e81856ba0ed12a51bd2cf761_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01da600e6bc960ad5d2b354eb87b1803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
CloseClipboard
DefFrameProcA
GetCapture
DefMDIChildProcA
GetDesktopWindow
GetMenu
CreateIcon

gdi32

GetBkMode
GetDCOrgEx
CreateBitmap
GetDIBColorTable
GetBkColor
GetCurrentPositionEx
GetTextColor
RestoreDC
SetBkColor

comdlg32

GetSaveFileNameA
FindTextA

kernel32

GetVersion
GlobalDeleteAtom
GlobalAlloc
GetVersionExA
GlobalAddAtomA
VirtualAllocEx
ExitProcess
LoadLibraryA

Exports

Exports

rP33sI73FhX1q@20
DGeITnnv
_JJ5iI8E5cAO_0t
sDAK1Kq27vuK@8

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ