05913cf8a4fe9595215f0d98468a1508_JaffaCakes118 | Triage

Sharing

General

Target

05913cf8a4fe9595215f0d98468a1508_JaffaCakes118
Size

184KB
MD5

05913cf8a4fe9595215f0d98468a1508
SHA1

68ecdda3e5cf8ed552197225844569a85bf6f6e8
SHA256

eeb0ffa0419068895f38fa502f258297286b379ec45b09a2d7cd51445729aea3
SHA512

dd8f616759186ad5a135aaeb17faed76eef6e9c69d2578ed1d7b8bf245c823eeb8cf1bc56a5b675169225afc93cd85919b8eb688e3f779bf9cf8422a234c95df
SSDEEP

3072:se+zkE3pT/1zinUVFOz41Me/WDK42UuFW2Kp5Ze8k3ZxwSPgY7:8z91VfEtRDKq6q5Zg3XwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05913cf8a4fe9595215f0d98468a1508_JaffaCakes118

Files

05913cf8a4fe9595215f0d98468a1508_JaffaCakes118
.exe windows:29479 windows x86 arch:x86

69345cbf053fd4d5673da4f908600975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
BitBlt
GetObjectW
GetObjectW
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
SelectObject
GetObjectW
SetTextColor
PatBlt
DeleteObject
TextOutW
LineTo
SelectObject
LineTo
SelectObject
DeleteDC

kernel32

LoadLibraryA
GetModuleHandleA
VirtualAlloc
GetCurrentThreadId
VirtualFree
GetModuleFileNameA
GetCommandLineW
SetEvent
MultiByteToWideChar
GetCurrentProcess

user32

UpdateLayeredWindow
GetDlgItem
DestroyWindow
CreateWindowExW
SendMessageW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ