bde34893ed6f127b8a5c83826a436109_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bde34893ed6f127b8a5c83826a436109_JaffaCakes118
Size

72KB
MD5

bde34893ed6f127b8a5c83826a436109
SHA1

91865c59503e2737448699e811d198d0a8628aec
SHA256

e1800eeaef3a01bc5d3255ec542849c7062cc4e8d0d0ce045291507ef61e03a4
SHA512

ae34714b89b1b89b7335b4ba7eaff9206fe36b277483ab1fa876835a1918fb0659876624941ee5a81e7343163f6232d244c5a80bf0a569990eca46cb7c8d371c
SSDEEP

1536:LiLk3TKYmx3nM/rXpubmcXkRXRbVmQkm2Brg9zY:LiLcj7p8bUX4b4zY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bde34893ed6f127b8a5c83826a436109_JaffaCakes118

Files

bde34893ed6f127b8a5c83826a436109_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f8c6f960b9ce8a88e1576e81c6c16ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertDefaultLocale
CreateEventA
FindFirstFileA
FreeResource
GetCurrentProcessId
GetFileSize
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
GetSystemInfo
GetTickCount
GlobalReAlloc
HeapAlloc
HeapCreate
RaiseException
ResetEvent
SetEndOfFile
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA

user32

CheckMenuItem
ClientToScreen
GetCursorPos
GetMenuItemID
GetMessagePos
GetSubMenu
GetSysColorBrush
GetTopWindow
IsRectEmpty
ModifyMenuA
ScreenToClient
SetClipboardData
SetPropA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ