976ddf527bfb8042c487a79d390c645d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

976ddf527bfb8042c487a79d390c645d_JaffaCakes118
Size

40KB
MD5

976ddf527bfb8042c487a79d390c645d
SHA1

65134f77056ca71abdbaa9a95ad3c9eb1fcc8daf
SHA256

697aef6276efd30efbb2c68bd13f56caaccf5df4889cf72b5eae4d1f9bd5e28c
SHA512

f0e638c57cbd0c45d15e5cb9cd961a059d509b155db55d13780ad21673b53321e92f2d27fa1cf36c327a351f31f3c5c1a16f6f7bfc6618da88d7d19ca5b38cfd
SSDEEP

768:apuZG8F3AXhfxlx6V680bAli3J9Pyj1OB4gauGN3wG3auLZ2YPJ3bw:ap+BF3AhDxE/vu96OWuGqSAYq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
976ddf527bfb8042c487a79d390c645d_JaffaCakes118

Files

976ddf527bfb8042c487a79d390c645d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9de9ce91de7c0b75c8e3e44420e0693

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
GetModuleFileNameA
IsBadStringPtrA
GetModuleHandleA
ScrollConsoleScreenBufferW
EnumTimeFormatsA
BuildCommDCBAndTimeoutsA

user32

TranslateAcceleratorA
GetPropA
CharNextExA
InsertMenuItemW
RemovePropA

gdi32

CreateColorSpaceW
GetMetaFileA
CreateFontIndirectA
GetTextExtentExPointA
CreateScalableFontResourceA
CopyMetaFileW
DeviceCapabilitiesExA

Sections

.data?
Size: 32KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ