948245422b72aaf1b5adf9bafdf98205_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

948245422b72aaf1b5adf9bafdf98205_JaffaCakes118
Size

240KB
MD5

948245422b72aaf1b5adf9bafdf98205
SHA1

bfe42d653f2e9d664506fe0675a5babc0f414dda
SHA256

67c65de02c816667e8b663d3b936b77a52e8cb282daa256c0d2cd46d2dbcc7e7
SHA512

09f8c83c84868c09f1677f95b3ea62c9edc243c49b129dfb1fb85b59796810a1a5c258f081b7ea15835bb154f5a331d08bd6f5f653adc6837752cc7f24a87d11
SSDEEP

3072:PzR/Yoh8omwtl9Pzp4d9DlyT2lvMK3NTe4Td+EbgwK51qtnB37rY49Izx7JYe:PtAYtyd9DlyCEKdTB3bgbcBrsjYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
948245422b72aaf1b5adf9bafdf98205_JaffaCakes118

Files

948245422b72aaf1b5adf9bafdf98205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0439c250d991358e8e580cb6b73ff913

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsW
SetStdHandle
GetShortPathNameW
GetTapeStatus
LocalCompact
FreeLibrary

user32

DrawCaption
DialogBoxIndirectParamW
OffsetRect
SetUserObjectInformationA
SetDebugErrorLevel
GetUpdateRect
CharLowerW

gdi32

PlayEnhMetaFileRecord
GetMetaRgn
SetTextAlign
ArcTo
GetCharWidthA
EqualRgn

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE