866d5552e8b5ac8e07278010b8932907_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

866d5552e8b5ac8e07278010b8932907_JaffaCakes118
Size

33KB
MD5

866d5552e8b5ac8e07278010b8932907
SHA1

6ddb54a30d9eaa26560fe607ac9415e15fa5c425
SHA256

bf721da8eca5ed4f413e58df2b29c5f92c4005fdc6e8f507d0e11ea30bdf837e
SHA512

8330bc64268abaa5705dad5cae46d7ae5fee52d8880f068e1f591d4f2a37e25451c87681c2ae7a99f7b88971fea718f61441aa4644e2f7227590b735b61460df
SSDEEP

768:ePOORj11Klv5Fx2n89zhdI4Qk+JOIIzLE4D:ePdj11oBGnk4T8vE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
866d5552e8b5ac8e07278010b8932907_JaffaCakes118

Files

866d5552e8b5ac8e07278010b8932907_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f47c3712129ddfb15fa3c6e03232da65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
FreeLibrary
GetFileSize
GetModuleHandleA

user32

GetMessageA
BeginPaint
GetFocus
EndPaint
DispatchMessageA
DefWindowProcA
GetSysColor
SetFocus

msvcrt

wcschr
_controlfp
__p__commode
_acmdln
memmove
wcslen
_XcptFilter
toupper

gdi32

CreateFontIndirectA
SetBkMode
SelectObject
GetTextMetricsA

Sections

.text
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ