bf0f8252e684674a64c3dd5f6f2cbe7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf0f8252e684674a64c3dd5f6f2cbe7c_JaffaCakes118
Size

125KB
MD5

bf0f8252e684674a64c3dd5f6f2cbe7c
SHA1

b1af9fd04fab17459a71badd59a268c9694c2132
SHA256

180349a5c4c79f0a1ce4e3340c264a6fe186d139f62241800967fe526a26ed87
SHA512

587074b07d6152368ecdda2b3af0a7da23ba19ac36de2a3e1dca35b61e49bccb46c2a4d5cefdf9268075bf8f91fb239279ab553b9fd0d5ecb18a646306b799a7
SSDEEP

3072:EJgwBIxhn+dz7diTqkGqcZBUPs7dHNnu3lAzyDJkluJfBd8W:EuwWx8fScnUPey1BtB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf0f8252e684674a64c3dd5f6f2cbe7c_JaffaCakes118

Files

bf0f8252e684674a64c3dd5f6f2cbe7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58310c0d0fdf9a017bcb0cb0e016ff1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
GetBitmapBits
CreateBitmap
CreateCompatibleBitmap
CopyEnhMetaFileA
GetPixel

user32

DrawEdge
DrawFrameControl
DispatchMessageW
GetCursor
GetMenu

ole32

GetHGlobalFromStream
MkParseDisplayName
CoCreateGuid
CoFreeUnusedLibraries
CoReleaseMarshalData
CoUninitialize
CreateOleAdviseHolder

kernel32

GetACP
lstrcatA
MoveFileA
LoadLibraryA
GetThreadLocale
VirtualAllocEx
HeapDestroy
GetCommandLineW
GetModuleHandleA

Exports

Exports

__4JHmH70_tzLR

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ