b96ccb390e5f99567e2c9134299d34df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b96ccb390e5f99567e2c9134299d34df_JaffaCakes118
Size

66KB
MD5

b96ccb390e5f99567e2c9134299d34df
SHA1

8f5c385d432a7a996bf860799586a9a74477976a
SHA256

6fc3b1983efa923a164f653e6239ce70d3a423f4bca1baa6d653b81844565edb
SHA512

5dc2895250164b62c226390388f10745057870401d541f686c42202edb7f9f6619adb9ab7f8279bcf595ecfb3ea6e4090852637036e51515d48592ccff2d7766
SSDEEP

1536:eE/zfoBSURyeFt+wiQYviuRQy0rpv2Yev/pSxL4u4od+:e2ow/WiQBuRV0rh2YegLd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b96ccb390e5f99567e2c9134299d34df_JaffaCakes118

Files

b96ccb390e5f99567e2c9134299d34df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

104d52e98d6eba52acddf02fa04f102e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

RectVisible
InvertRgn
PolyPatBlt
CreateRectRgn

kernel32

LocalHandle
GetCurrentProcessId
GetThreadLocale
CreateEventW
GetCommConfig
LocalAlloc

msvcrt

__p__tzname
_mbsnicmp
_dup
__p__wpgmptr
_copysign
_getws
_inp

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE