96475d679cc3df6c296b4474016faf7a_JaffaCakes118 | Triage

Sharing

General

Target

96475d679cc3df6c296b4474016faf7a_JaffaCakes118
Size

204KB
MD5

96475d679cc3df6c296b4474016faf7a
SHA1

d0ade86016f2dd9cf88b97ddfa99084325ed3a2f
SHA256

ced8ef0467315d3fa3ed4b2ae864c9387d9ff6d70446a966af0b8fe85b217376
SHA512

9015d6b638173c333163f5868b976e6f55caddcd21bf0fd9a615952559e90f1b5b3ead318e5949f52dbc34a782be3981b9a3565f51efcc20ef3b8ec30f372f6e
SSDEEP

6144:JflNsD4EgQ/wlY0xVycfDyqMiRhxDzZpQ8SaNctTZaxdfZY:J4fgQSzPhHHu5aeaxhZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96475d679cc3df6c296b4474016faf7a_JaffaCakes118

Files

96475d679cc3df6c296b4474016faf7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a94ec18e5197c48b42ff25674d473f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetFocus
UnregisterClassA
CreatePopupMenu
UpdateWindow
GetCapture
WindowFromPoint
LoadIconA
UnhookWindowsHookEx
WaitMessage
GetMenu

comctl32

ImageList_Add
ImageList_Write
ImageList_Create
ImageList_Destroy
ImageList_DrawEx

version

GetFileVersionInfoA
VerInstallFileA
VerQueryValueA

gdi32

CreateBitmap
GetDIBits
SetPixel
GetBitmapBits
GetTextAlign
CreateBrushIndirect
CreateDIBitmap
LineTo

kernel32

VirtualAllocEx
ExitProcess
LoadLibraryA
GetCurrentThreadId
GlobalAlloc
GlobalFindAtomA
IsBadReadPtr
GlobalDeleteAtom

Exports

Exports

oBIdiBtBFhDt
_eby2xSix92xDL7@20

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ