b5e3d166a1d187334c2fb53a3805c3ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5e3d166a1d187334c2fb53a3805c3ae_JaffaCakes118
Size

51KB
MD5

b5e3d166a1d187334c2fb53a3805c3ae
SHA1

f7f277747b76f3db4a12e39b30e5f659b29e31dd
SHA256

bbe2c9c14a404e68b7d01be91abe9832a68bf6195fcdf6915162d58bdaa26fad
SHA512

44ca69ca0c0dde5f319795fdbc0c7677481dec499aa87f6b28268a26bebe972670691b62f8533ccf7fe66662e8876c4416605ee1cdb1a3bb63ac7a0390239b93
SSDEEP

768:g4zQK8EFOW+HreI1cHlajj8tLBs5tc6Eq2mMLjHxYRPP2:g498EMWcr6lajQeaFRYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e3d166a1d187334c2fb53a3805c3ae_JaffaCakes118

Files

b5e3d166a1d187334c2fb53a3805c3ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e576260fe17d5350eeb7e8081659364

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\kIalaWqQdasih\cKHmzAj\cpsfPJe\phoqYlKb\zQaqpsnhoL.pdb

Imports

user32

AdjustWindowRect
wsprintfA
GetCaretPos
DialogBoxParamA
MapVirtualKeyExW
LoadAcceleratorsA
ClipCursor
GetClassInfoExW
GetDoubleClickTime
MessageBoxW
LoadBitmapW
IsWindowUnicode
IsCharAlphaW
GetMenuStringA
SwitchToThisWindow
CheckRadioButton

shlwapi

StrFormatByteSize64A
StrRChrW

gdi32

MoveToEx
SetTextColor
CreateFontIndirectW
CreatePalette
GetTextCharsetInfo
SetLayout

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
tolower
_initterm
_ismbblead
_XcptFilter
strerror
_exit
_cexit
__setusermatherr
__getmainargs

kernel32

GetCurrentDirectoryW
SetLocalTime
AddAtomA
LoadLibraryExW
GetDateFormatA
GetVersionExW
GetModuleHandleA
SuspendThread

Exports

Exports

?FutureProspect@@YGHPADK|U

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE