9419fd2549c188991c04faa2cb46845a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9419fd2549c188991c04faa2cb46845a_JaffaCakes118
Size

136KB
MD5

9419fd2549c188991c04faa2cb46845a
SHA1

35b8033238ba5d6ff3c0e204c7de85f5d537d1bc
SHA256

d6780a29cbc4f8bb99b3c05eb9968206d2c13ff178b34723f1fcbaf933e79ea3
SHA512

db56b6212f725b6f7d683abfd332ce62e1271cd25bda13ea0ceecec3b5a8c7dcb28c55f4d335a44276801d30853f923425cdbe51e5ffb8166821a8a9b39b4f5d
SSDEEP

3072:1fBO9lEqGDk+h0fo4CbkpKtD5taCfUEsM:1fk9IxhyCbntrUEsM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9419fd2549c188991c04faa2cb46845a_JaffaCakes118

Files

9419fd2549c188991c04faa2cb46845a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33ede1357fb640897f679d881f490ff8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

TextOutA

kernel32

VirtualAlloc
GetProcAddress
AddAtomA
FreeResource
GetModuleHandleA
VirtualFree
LockResource
LoadResource
FindResourceA
EnumTimeFormatsA
EnumResourceTypesA
ExitThread

user32

DestroyWindow
KillTimer
SetTimer
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ