aac794bd3cab7739c86e3de0a99ea9ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aac794bd3cab7739c86e3de0a99ea9ac_JaffaCakes118
Size

36KB
MD5

aac794bd3cab7739c86e3de0a99ea9ac
SHA1

aed58259f0a32b6926351a3023eda674ec329802
SHA256

0510eaf914785a2bb9f0235cb2122128b1ab3bf553f6216c973c6a90da1f226a
SHA512

bf08809c0b4710555a6d7ca293c23b1b508383299dcd5ad9314295973a17cc3109602ce01e28d0822f4206924b02b5587c0bb70d339c0ab23de029d644744810
SSDEEP

192:J825UGbfxapZYdvoeXvnPExb7HXu2ZDjGETQwW4+r7pPGrj5:JR+GDqi433u2VaETQwW4+r7pGj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aac794bd3cab7739c86e3de0a99ea9ac_JaffaCakes118

Files

aac794bd3cab7739c86e3de0a99ea9ac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

08798d6c4e49d7675112d15d96c34826

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateSolidBrush
IntersectClipRect

rpcrt4

I_RpcBCacheFree

kernel32

GetLocaleInfoW
ExitProcess
GetOEMCP
GetModuleHandleA
VirtualProtect
FreeLibrary
GetStartupInfoA
lstrcmpW
SetFilePointer
HeapFree
GetACP
GetCurrentProcess
GetProcAddress
GetCommandLineW
HeapDestroy
SetConsoleCP
SetStdHandle
HeapAlloc

user32

OffsetRect
SystemParametersInfoA
GetClientRect
SetWindowTextW

msvcrt

_lock

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ