a103a61c0f192d00268acdc9cbc20709_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a103a61c0f192d00268acdc9cbc20709_JaffaCakes118
Size

57KB
MD5

a103a61c0f192d00268acdc9cbc20709
SHA1

967a49273160ef0b510cceeb9b831a4ae69daf59
SHA256

39852dcbf58ce3d850b918a75af8f60af0d994f42a2f8165cbaed7697dd1692f
SHA512

6131a1058d6604f415325146294ade8557c0c8b98e9e674dbec7218dee326b7424b4660e9d8e18d50620a5562db10b2d20073f0aed8701099d259d930e7e03c7
SSDEEP

1536:7pDd9uWrbSaaBkUXhXm2nw9dzGVqniFQqxKBrHqhoa:tDd9tHajmvYVjKBGoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a103a61c0f192d00268acdc9cbc20709_JaffaCakes118

Files

a103a61c0f192d00268acdc9cbc20709_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7637ca5248720792a31e686a8cffb095

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1exception@@UAE@XZ
??_U@YAPAXI@Z
?_set_new_mode@@YAHH@Z
??1exception@@UAE@XZ
?terminate@@YAXXZ
__CxxCallUnwindDtor
__isascii
__badioinfo

comdlg32

GetOpenFileNameA
GetOpenFileNameW
PrintDlgExA
ChooseColorW
LoadAlterBitmap
CommDlgExtendedError

Sections

.text
Size: 26KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 437KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE