711e556ce05d2c6ccd35cf72c19a8e53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

711e556ce05d2c6ccd35cf72c19a8e53_JaffaCakes118
Size

175KB
MD5

711e556ce05d2c6ccd35cf72c19a8e53
SHA1

af4bd8b032a5d67d1e448934c8dba9b812f10dfd
SHA256

8008ba9c1cdeb9faac3db13ffdb38d60a52f24358d8c588e02584c3b9729e9fd
SHA512

12923a8bc239db88ab46b4db5594f5238b455673fb2b6aad5fb5cc4001a41210e4320f8d5d3960e8fe23d6ed66937f9772f25d54030ace3555d6df07ace327d6
SSDEEP

3072:jPOvWybkOwfT8tDfa22xNr58Y19w0h9iWDVs8HGbLiAMZ90DdwkjYt5zkec:7OvNbkzQVi1xhyQ9wT2s8mbLtMc/jM5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
711e556ce05d2c6ccd35cf72c19a8e53_JaffaCakes118

Files

711e556ce05d2c6ccd35cf72c19a8e53_JaffaCakes118
.exe windows:5 windows x86 arch:x86

318d6316cf960a89fc9de469085e11b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\ASqyfrL\qrkqqoCLyvl\rWqeavkczmxw\rcjuikidNiAbvv.pdb

Imports

user32

FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect

ntdll

RtlCompareMemory

kernel32

FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue

Exports

Exports

?FileIsMove

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gcv
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ