ba356b3f3dd5250d1371ec5a0c4c9f0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba356b3f3dd5250d1371ec5a0c4c9f0c_JaffaCakes118
Size

156KB
MD5

ba356b3f3dd5250d1371ec5a0c4c9f0c
SHA1

110e7f6d1d8e3c77256f36b9f6c282605e25a685
SHA256

763fcd2e93a307124e8ca0943d7eba6c4ae72f97e817ccf9725227614f9ebecc
SHA512

166c8a5b36f51c5432ac2abbe1961c8d075b1208f75b1d1c37100cf719a45673c1a6961beee4b73f4b1d5a6b66bd01214878e4fbacc87e36b39200896238ad4c
SSDEEP

3072:5Xzyt/xu+yOHIx4qdg9eHAJ6/kemAZ7HIluNjB2Oarwuelu:5Xzyd5IxW9egJ6/1m87bN2OarwueY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba356b3f3dd5250d1371ec5a0c4c9f0c_JaffaCakes118

Files

ba356b3f3dd5250d1371ec5a0c4c9f0c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

137a9b4a6059d8b53e3c9d8dbb713fc9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\XXVZzlrzSWe\qlsegYgken\dDZlgtNbr.pdb

Imports

gdi32

CreateRectRgn
GetRgnBox

kernel32

CreateFileMappingW
GlobalMemoryStatusEx
GetModuleFileNameW
GetComputerNameA
EnumResourceNamesW
VirtualProtect
CloseHandle

user32

SetWindowTextW
MonitorFromPoint
DefWindowProcA
GetUpdateRgn
TranslateAcceleratorA
SetMenuDefaultItem
TrackPopupMenuEx
WaitForInputIdle
SetFocus
AdjustWindowRect
EnableMenuItem
IsWindowEnabled
CopyRect
SetRectEmpty
FindWindowExA

ntdll

RtlCompareMemory

Exports

Exports

?TemporaryArrayCre

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE