b8113433d815a78614187d9a68ab2743_JaffaCakes118 | Triage

Sharing

General

Target

b8113433d815a78614187d9a68ab2743_JaffaCakes118
Size

200KB
MD5

b8113433d815a78614187d9a68ab2743
SHA1

33d46ef80b9bdd9129b7f44712280670faf8ace5
SHA256

a76b4ac096af05923e78be0c6042e79ca7df5dada16c3777b2b40d490e07eba4
SHA512

d2faf293490039047068c39a257902794ec8b6cebe2dfc56a3050f62bcadb4476a6b863bd0729bc7f2922113968721bd0eb3910c7b075039ca49197c0b5238fc
SSDEEP

6144:bBONlP/74lRPHiYMKC0Yf5jIz0us/TUHe:VO3iKDjWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8113433d815a78614187d9a68ab2743_JaffaCakes118

Files

b8113433d815a78614187d9a68ab2743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48bdd5d93635a1c3889dec7a442e8c1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
LoadLibraryA
SetEvent
VirtualAlloc
VirtualProtect
Sleep
GetProcAddress
GetModuleHandleA
HeapAlloc
VirtualQuery
lstrcpyA
ResetEvent
HeapDestroy
VirtualAllocEx
GetCommandLineA
GetLastError
LocalLock
VirtualLock
OpenMutexA
GlobalLock
FindFirstFileA
PulseEvent

user32

LoadCursorA
DestroyWindow
GetTopWindow
SendMessageA
GetDesktopWindow
GetParent
GetSysColorBrush
SetTimer
ReleaseDC
GetWindow
GetDC
GetCursorPos
IsZoomed
IsChild

gdi32

DeleteObject

msvfw32

DrawDibOpen
DrawDibClose
DrawDibEnd
DrawDibSetPalette

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ