b243951d46efbb5fcb0fcb117a28872a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b243951d46efbb5fcb0fcb117a28872a_JaffaCakes118
Size

110KB
MD5

b243951d46efbb5fcb0fcb117a28872a
SHA1

46fa0edd39fadecc5a76c781853aafdee50d434e
SHA256

3a4c4f57a58353bf35597a27c8b0f79cab82891032388f8b11b9289ccc6d7142
SHA512

505cae93774b48c1e5260eb6d914b967ff316a3c2624b1af5f4c0df91a1cf157871fcc82511b6869e960ea758e40fc3910840543f633dc5d7a1ede34c49719f9
SSDEEP

1536:AS+3A3nM61rf7B3+hPGSeRxkrZuQ+SoOh669U/U/FySOtdp/zhz/+BWTADCeK/u2:UA3nM61rfeGxxQl+SQBsFl6RBqJXI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b243951d46efbb5fcb0fcb117a28872a_JaffaCakes118

Files

b243951d46efbb5fcb0fcb117a28872a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1185167bb4f394b1933098230507880a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetProgmanWindow
GetKeyNameTextW
GetDialogBaseUnits
LoadBitmapW

kernel32

VirtualProtect
GetStartupInfoA
GetDiskFreeSpaceA
ExitProcess

gdi32

GetFontLanguageInfo
GdiSwapBuffers

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE