bb5f763b0f4d72ea0abd79a5209cbbbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb5f763b0f4d72ea0abd79a5209cbbbd_JaffaCakes118
Size

153KB
MD5

bb5f763b0f4d72ea0abd79a5209cbbbd
SHA1

3228445fc96753fd03ac7ee124aacc836adfe85c
SHA256

508285aec480a0bfc825f730407279211fe805269cfadee2b68e93156b9537cc
SHA512

d8cb0ab23eaaac3c66fbf2c22a53ededbbfbccb9a6c7191357ef57596b65c39f72d8cc99629623004d9c1481c33625f7dc6578e05e6ea7890804f1013863d303
SSDEEP

3072:ePOm4JJyLrNnek6tUlrlqJg1/cNMSVsV7TEpneb00DGyYa4QXLe3:GOWL9eNtU310eZV7TEpebVGyYmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb5f763b0f4d72ea0abd79a5209cbbbd_JaffaCakes118

Files

bb5f763b0f4d72ea0abd79a5209cbbbd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

318d6316cf960a89fc9de469085e11b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\sqmzxuo\iPSkZWrIp\nvOwzqdatzxim.pdb

Imports

user32

FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect

ntdll

RtlCompareMemory

kernel32

FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue

Exports

Exports

?FileIsMove

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE