b9d79ff238cb288f444f4c1b1c3543f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d79ff238cb288f444f4c1b1c3543f0_JaffaCakes118
Size

125KB
MD5

b9d79ff238cb288f444f4c1b1c3543f0
SHA1

6deb072fa481e2ffd72c5bc92ef659c641a30cd8
SHA256

48b74dbe14970bee80d36e2a45c8d362783c034db68393ffb1cdfd536085afcb
SHA512

072f8333dd51df07d20721f76c649ee23ca1f3506898396e61bbfc5840e5f135145b49d725c0eac0a7e13832b11642ef6005a61681125ed0ba2ef70bb76777e9
SSDEEP

3072:4I2vfNOgvS+TcAVDj/C5vQz68LRYkZi8SZW91wp:Z2dnvl7Dj/C5Iz68L/U8SZkS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d79ff238cb288f444f4c1b1c3543f0_JaffaCakes118

Files

b9d79ff238cb288f444f4c1b1c3543f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e825171e4e7faebf1822df5a545144cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
GetBkMode
CreateBitmap
SelectPalette
BitBlt
GetBkColor
SelectObject
GetPaletteEntries
GetTextAlign

user32

CreatePopupMenu
GetSysColor
GetMenu
GetSystemMenu
GetSysColorBrush
GetTopWindow
CharLowerA

ole32

OleCreateStaticFromData
CoReleaseMarshalData
CoCreateInstanceEx
CreateStreamOnHGlobal
CoFreeUnusedLibraries
OleRun
ReleaseStgMedium
CoUninitialize

kernel32

LoadLibraryA
VirtualAllocEx
GlobalAlloc
CreateThread
DeleteFileA
CreateFileA
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA

Exports

Exports

zNIubQh
_mfzPorZSM
_nyXKQk@4
2dqYTU77il7u@12
_tsxB2CUqd@24
_YRqnNwKyE
_MivVNIqfuBSWs2@12

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ