72eae79bed2fdcc11ad1f6a07a684915_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72eae79bed2fdcc11ad1f6a07a684915_JaffaCakes118
Size

144KB
MD5

72eae79bed2fdcc11ad1f6a07a684915
SHA1

dc30e92e302c9ff83b32e9d1d69686594e10c675
SHA256

b2dcd269b2fa593619f5822af7676fc6d92649bb3fba48b45428a6e418116aac
SHA512

7bd53fa0f70a6daf06d0d2469cc443fe7ca485cbfbbb8eb5eab05e493964668b1e3e253d3158bf7f6e8167cb07a4266b5b5b2d4c045212672ea709025949280d
SSDEEP

3072:/K4r7Z99jY5q+gWRG8BdP8hHBoy8CXEAn04j:/VZ99hWrGpBqCXEAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72eae79bed2fdcc11ad1f6a07a684915_JaffaCakes118

Files

72eae79bed2fdcc11ad1f6a07a684915_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da3f6f535fb1ab50ce9c332832b9e1f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
AddAtomA
FreeConsole
UpdateResourceW
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

SetDlgItemTextW
EnumDisplayDevicesA
ReleaseDC
DrawStateW
WindowFromDC
GetMessageTime
IMPGetIMEA
LoadKeyboardLayoutW
WaitMessage
GetKBCodePage
GetAncestor
OpenDesktopW
GetAltTabInfoA

gdi32

SelectClipPath
GdiGetLocalDC
GetTextFaceA
FONTOBJ_pfdg
EngMultiByteToUnicodeN

Sections

.text
Size: 8KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE