beaff36fde4ef57b17fc0975dddeab8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beaff36fde4ef57b17fc0975dddeab8e_JaffaCakes118
Size

153KB
MD5

beaff36fde4ef57b17fc0975dddeab8e
SHA1

80d784df231cd9d44c19006caad8ca7020b583a4
SHA256

5f5578bb5b3c93e620884a7b0fab27f240f0af4e4c6f395f984db4670de43f87
SHA512

9b19fd5ccd773815775367c829f6731a583dd7d400bcd934692de72b32796740d81261f332184df644cb52e28bef7ec513c55a054d3fed0243f15e19187035f2
SSDEEP

3072:rPOmO8Vr6qX5lnoXYvCxAarg5hf1g9bTXoAkHXD/ObF0Mrg0Hubo6q5Ke3:jOvc6qXkDxAJ5TgSHSvrg0HukXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beaff36fde4ef57b17fc0975dddeab8e_JaffaCakes118

Files

beaff36fde4ef57b17fc0975dddeab8e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

318d6316cf960a89fc9de469085e11b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\sqmzxuo\iPSkZWrIp\nvOwzqdatzxim.pdb

Imports

user32

FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect

ntdll

RtlCompareMemory

kernel32

FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue

Exports

Exports

?FileIsMove

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE