770cc2e2a184eaad0d79716f0baf9e48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

770cc2e2a184eaad0d79716f0baf9e48_JaffaCakes118
Size

86KB
MD5

770cc2e2a184eaad0d79716f0baf9e48
SHA1

d7b1a9c7a0b2cd40f3ffedbb17e91827a410593d
SHA256

39a9655c4ab3e90dc79f5a3d00add4a2f3a37baabead877d5d3c029f8e4047fc
SHA512

026ca6d8cee207e934ca4a4958d7feaeed6acbf6961d69168dea6fa84e534dcbff3ea4431d1e77307909df2dd5a4e7ce3c24734527de9a60f3d9c2e8c920eba8
SSDEEP

1536:DVIWGnI8/Szlh7pR8DkiYVEgk0il7Qs1inQrfNFG8bGq:D/G3qzlhVR8DkR6l3fNFVGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770cc2e2a184eaad0d79716f0baf9e48_JaffaCakes118

Files

770cc2e2a184eaad0d79716f0baf9e48_JaffaCakes118
.exe windows:5 windows x86 arch:x86

55629ab8d56d48a0f590ed25ce3e2910

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
RegisterClassExW
IsWindow
IsWindowVisible
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
SetWindowTextA

gdi32

SetRectRgn
GetTextColor
CreateFontIndirectA
DeleteObject
GetStockObject

kernel32

GetLastError
GetPrivateProfileStringA
GetTickCount
GetEnvironmentStrings
GetThreadLocale
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryA
GetDateFormatA
HeapFree
HeapDestroy
GetStartupInfoA
InitializeCriticalSection
FreeLibrary
HeapAlloc
HeapCreate
GetProcAddress
CompareStringA

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ