ba121b85070015e0f04af81707ef9cd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba121b85070015e0f04af81707ef9cd3_JaffaCakes118
Size

108KB
MD5

ba121b85070015e0f04af81707ef9cd3
SHA1

4e699753a3bca8d9ebc76c6162a2d6904b10fc44
SHA256

2f2cda0b27d7af724aaaa67c2eff87742e69e75270fddedd4ef130bee050b103
SHA512

58a486deb0280136c2ea58659aca325c52aa9df50e3c1fddad63b1820440c77c352c8c57aa6d33e085b52d39d2aa3c08274176e4f8c3bb57dcf01a0d02e133c2
SSDEEP

1536:he1nSCpuyMPOUELF/YpCd20yHUyg2XmBoIWEVhT+iyFEwgmvZ:crEyDFApCd+HUy9XmomVhT+icLgmvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba121b85070015e0f04af81707ef9cd3_JaffaCakes118

Files

ba121b85070015e0f04af81707ef9cd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d555132f90633d2bf901d3f62d867683

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushConsoleInputBuffer
EnumSystemGeoID
HeapDestroy
ExitProcess
GetCommandLineW
GetCurrentProcess
SetLocalPrimaryComputerNameA
SetEndOfFile
VirtualAllocEx
SetInformationJobObject
GetCurrentConsoleFont
GetPrivateProfileSectionNamesW
RemoveDirectoryA

user32

InvalidateRect
LockWindowUpdate
CascadeChildWindows
LoadBitmapW
UnpackDDElParam
GetWindowLongA
SetMenuItemBitmaps
DlgDirSelectExA
IsClipboardFormatAvailable
SetMenu
CreatePopupMenu

gdi32

SetBoundsRect
PolyTextOutA

Sections

.text
Size: 96KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbbs
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ