a09576e8edfb28dede2943b85350382c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a09576e8edfb28dede2943b85350382c_JaffaCakes118
Size

1.0MB
MD5

a09576e8edfb28dede2943b85350382c
SHA1

71378549dc63e7ba130c10112b9d706edc0c3961
SHA256

be0ba353782ddc30edb40a959807e7f167f46941cb76bcdcc7bff9f15c43edee
SHA512

a31480fb731a213e04ffaf140c0b10f8376479edfee0a8dd4d66bfaa437bb612850ef60685f88c7bcfca0a4531b7b82a471e1a65b0ae1842c266bba62e748cb9
SSDEEP

24576:3q8a7pOajCKB5O6dtU50YKTjGeJfAf4JXS:3qlpHTBc6dtU50PGeBi4JXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09576e8edfb28dede2943b85350382c_JaffaCakes118

Files

a09576e8edfb28dede2943b85350382c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b98b2725c38b04c22e347a8f4252d8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
FreeLibrary
CreateEventA
GlobalAlloc
GetModuleHandleA
GetCommandLineA
GetLastError
GetTickCount
LocalFree
GetFileSize
CloseHandle

gdi32

GetBkColor
CreateCompatibleDC
GetStockObject
CreateSolidBrush
DeleteObject
MoveToEx
GetPixel
SetBkMode
CreateFontIndirectA
ExtTextOutA
SetROP2
GetObjectA
SelectObject
GetTextExtentPoint32A
GetDeviceCaps
LineTo
BitBlt

msvcrt

exit
_adjust_fdiv
_acmdln
__CxxFrameHandler
toupper
_exit
__getmainargs
__p__commode
__setusermatherr
wcslen
__p__fmode
memmove
rand

user32

CreateWindowExA
GetSysColor
DialogBoxParamA
GetWindowRect
TranslateMessage
LoadIconA
MessageBoxA
DefWindowProcA
EndDialog

Sections

.text
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ