8992d835d5b9b4e4154b5970abe9c0fd_JaffaCakes118 | Triage

Sharing

General

Target

8992d835d5b9b4e4154b5970abe9c0fd_JaffaCakes118
Size

152KB
MD5

8992d835d5b9b4e4154b5970abe9c0fd
SHA1

3268f8b769dddeab70d934214231a6c4565dc0f5
SHA256

2a71669d442b0ac3f6b4a26ae1b38080f3919f057c78a6e55fdda3dbac29d36c
SHA512

289cb3ab5f9aec1fec0f23b35b4534285fedde0a7e77455aaa942146b6c21b00959fd05a38c2c759939fff93a0a69bc88b16a63d5997e52d062832d04b23f6a6
SSDEEP

3072:exk7CMgTc8CK6KKdbVNbxXH9evcygrKGN38hbk+ugvcsvsr6hhtYiAW7rbqT1L6T:utd6FVXbxX9vNMh/ubl6lYiAWbESn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DeskBabes_Install.exe

Files

8992d835d5b9b4e4154b5970abe9c0fd_JaffaCakes118
.zip
DeskBabes_Install.exe
.exe windows:5 windows x86 arch:x86

3cfb418a0322148619c2ec2c596acd4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Hello\Insert\Data\File.exe

Imports

gdi32

SetWindowOrgEx
SetBitmapBits
CreateFontIndirectA
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
SetAbortProc
DeleteObject
CreateDiscardableBitmap
SetViewportExtEx
EndPage

kernel32

GetSystemDirectoryA
SetHandleCount
GetPriorityClass
AddAtomA
GetSystemWindowsDirectoryW
GetBinaryTypeW
LeaveCriticalSection
GetShortPathNameA
FindClose
ClearCommBreak
CreateThread
CreateFileW
SystemTimeToFileTime
GetExitCodeThread
CreateFileA

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ