b9bfecb04240ac8d81ac25cffc179b21_JaffaCakes118 | Triage

Sharing

General

Target

b9bfecb04240ac8d81ac25cffc179b21_JaffaCakes118
Size

338KB
MD5

b9bfecb04240ac8d81ac25cffc179b21
SHA1

a73b40a282efe4bb2925b0eace7eb8f3f25025b1
SHA256

228a1ef3d03cadcb4fa2907dbb981833e228432a620dca2a59e771c3262af2b5
SHA512

62dfa9c0e4c76cd4e7e1c6378ba959329447ea297810b5c49216ff57954f8c486fb1aa5dd3285ed611b4f27438441ae2ff3121066fce5c89b71d50ec4f18d8d4
SSDEEP

6144:GUm8d76JhYzQUOXFb7z9U7RQKIYdu0V/mj7rcS6WlsQpEC:GU96JizOZO7Rv580hmj76QpZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9bfecb04240ac8d81ac25cffc179b21_JaffaCakes118

Files

b9bfecb04240ac8d81ac25cffc179b21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14149f2800333879aca31bb745b26b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatA
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
GetCurrentProcessId

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
OleLoadPictureEx
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

user32

GetKeyState
EnableWindow
CharLowerA

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE