a18a5dc8d2650b4741d00b1eb821b284_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a18a5dc8d2650b4741d00b1eb821b284_JaffaCakes118
Size

93KB
MD5

a18a5dc8d2650b4741d00b1eb821b284
SHA1

90c98ed7d760c728c0338097a0abb2125b4794b7
SHA256

a4fb2a5548c6ab10c1745ef85e907917e80c80476a75fdb14cb7459b77426b0e
SHA512

2d645c8453c425c8c208b6783cb9cf939c4663e4732f4d52614ef9cccfd3535f051447b4f28d47bc7c1731a0e80a53d3b983c002d176d110901717346d4a9f1e
SSDEEP

1536:kee69MPcnaRExD+GHerYjGXxWmYAcep5eqDq5HBuGQo0MxBTjjU593Jv386h3AQi:HTrCG4zxX//pDW5HB6wBTjA5dJvMWAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a18a5dc8d2650b4741d00b1eb821b284_JaffaCakes118

Files

a18a5dc8d2650b4741d00b1eb821b284_JaffaCakes118
.exe windows:5 windows x86 arch:x86

db1f2da0efa2f266050da36519de6e40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursorPos
GetMenuItemCount
DeleteMenu
GetWindowLongA
DispatchMessageA
TranslateMessage
UpdateWindow
ShowWindow
GetMessageA
GetCursor
SetWindowTextA
CreateMenu
PeekMessageA
CheckMenuItem
DestroyMenu
BeginPaint
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
EndPaint

gdi32

CreateBitmap
GetStockObject
DeleteObject
GetROP2
Rectangle

ole32

CoGetMalloc
CreateBindCtx
CoInitialize
ReadClassStm

lz32

LZInit

kernel32

InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
GetSystemTime
LeaveCriticalSection
GetCPInfo
FreeLibrary
GetModuleHandleA
GlobalAlloc
GetSystemInfo
GlobalFree
GetLocalTime
GetLastError
HeapAlloc
HeapCreate
DeleteCriticalSection

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE