b636b0960b5bde1ddddce807687aed45_JaffaCakes118 | Triage

Sharing

General

Target

b636b0960b5bde1ddddce807687aed45_JaffaCakes118
Size

170KB
MD5

b636b0960b5bde1ddddce807687aed45
SHA1

2c0dd50fef0dc772faf1a0168e735bfa2fb13548
SHA256

f5d8ed5fc002d8490ffecb2ac82420ecd17ad2b30ed52966722e5b0bad762ae1
SHA512

2aa9d65b5f0e2ecffbf7b841bc8cfd3449d8e4dbcb0967fb7eb46cde0b4d6ef33b2dd063ea2e46d62e60bda0c572d4609f32cc575826d43b6e317f413117f86a
SSDEEP

3072:c2sQPcAcyg4FxXUhohjXck/o+ET3npYIT+iTZFYnrCDyg0:5PcAhxgoO+y3WITvYn+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b636b0960b5bde1ddddce807687aed45_JaffaCakes118

Files

b636b0960b5bde1ddddce807687aed45_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a26b4cabcec229394e718533aac3524d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
RegisterClassExW
BeginPaint
GetCaretBlinkTime
EndPaint
GetCapture
GetDoubleClickTime
SetWindowTextA

gdi32

GetArcDirection
GetStockObject
GetTextColor
GetBrushOrgEx
CreateRoundRectRgn
DeleteObject

comctl32

ord17

kernel32

GetProcessVersion
GetEnvironmentStrings
GetThreadLocale
SetFileAttributesA
HeapDestroy
GetTickCount
GetDateFormatA
GetEnvironmentVariableA
LeaveCriticalSection
FreeLibrary
DeleteCriticalSection
GetProcAddress
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
HeapCreate
IsProcessorFeaturePresent
GetCurrentDirectoryA
GetLastError
HeapFree
SetEndOfFile

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ