bed0f060941b8c6ef62d9734a290be0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed0f060941b8c6ef62d9734a290be0b_JaffaCakes118
Size

125KB
MD5

bed0f060941b8c6ef62d9734a290be0b
SHA1

3cabbaa1734452575fb1067280e2c729f381c23a
SHA256

1a52a5528046727c4e5b03c3ca45f36a287783175378072883d83074bda60d77
SHA512

4a407aa34fd628f26c4d9d40821e4cb04fcd4e37a83955282a6b1f9d64f6a3cf1dfb0c2f7a6a552cf85e5823e6602d573e489da2f2e4b3b0b22d928610cd28a8
SSDEEP

3072:EJgwBIxhn+dz7diTqkGqcZBUPs7dHNnu3lAzyDJkluJfBd8h:EuwWx8fScnUPey1BtB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed0f060941b8c6ef62d9734a290be0b_JaffaCakes118

Files

bed0f060941b8c6ef62d9734a290be0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58310c0d0fdf9a017bcb0cb0e016ff1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
GetBitmapBits
CreateBitmap
CreateCompatibleBitmap
CopyEnhMetaFileA
GetPixel

user32

DrawEdge
DrawFrameControl
DispatchMessageW
GetCursor
GetMenu

ole32

GetHGlobalFromStream
MkParseDisplayName
CoCreateGuid
CoFreeUnusedLibraries
CoReleaseMarshalData
CoUninitialize
CreateOleAdviseHolder

kernel32

GetACP
lstrcatA
MoveFileA
LoadLibraryA
GetThreadLocale
VirtualAllocEx
HeapDestroy
GetCommandLineW
GetModuleHandleA

Exports

Exports

__4JHmH70_tzLR

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ