bdda8eaf2b9738780f089f3f9cd12168_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdda8eaf2b9738780f089f3f9cd12168_JaffaCakes118
Size

262KB
MD5

bdda8eaf2b9738780f089f3f9cd12168
SHA1

cbf7995ee3a45747eca6156d0dfaec087080a2ed
SHA256

2f063b6a053ceac57c6c2ecd41824d29bc2ba7957caa0a8034c8469f7d9b6a1f
SHA512

7d10e10bb496c0716baba8c50be0f9969de546f685f31fd8e4225d00e301863d5bfcb6470c61a75c3dc2ea3bc656d6f904972adf82f21aaf547488fefc2a3f21
SSDEEP

3072:YFVojrE7lW+ue0pRmwP4S8aERPqzveQzPK+3vrPHfpWuJJmTA8Saz135sbETTMr1:YU6lQHK72MK2ePK+rBwM8SazHsQTTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdda8eaf2b9738780f089f3f9cd12168_JaffaCakes118

Files

bdda8eaf2b9738780f089f3f9cd12168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ce25d394ed24ed236ea71bf0eec1ed0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControls

user32

CharNextA
GetInputState
GetMessagePos
GetDesktopWindow

gdi32

SetWindowExtEx
LineTo
SetBkMode
BeginPath
SetViewportOrgEx
EndPath
UnrealizeObject
SetBkColor
SelectPalette
SetTextColor
GetDIBColorTable
GetPixel
SetMapMode
MoveToEx
OffsetViewportOrgEx

kernel32

GetProcessHeap
RemoveDirectoryA
GetThreadLocale
SetLastError
VirtualAlloc
GetConsoleOutputCP
GetCurrentThreadId
GetOEMCP
GetModuleHandleA
lstrlenW
DeleteFileW
GetACP
lstrcmpA
GetLastError
GetCurrentProcessId
MulDiv
CopyFileA
lstrcmpiA
GetCommandLineA
GetUserDefaultLangID

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ