c16f90825b828d88c9ac13fa6477f538_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c16f90825b828d88c9ac13fa6477f538_JaffaCakes118
Size

31KB
MD5

c16f90825b828d88c9ac13fa6477f538
SHA1

d39a831cd4d11212f881694dafc382839b86b0d3
SHA256

024bfc94e746d87082e4ba766c31b7e7d3153f0715a7fb00aab2480a6c69320d
SHA512

57896b36d027d9f92df21641d965f8f623e9f3b33a8fb52b83701851100fda67c6938030dac8b20397ba1c81ef062a455f20f3ca0cdb66692d7cd675a190b394
SSDEEP

768:M0VJ5ZfkEq/lRaBjjEhD0JAGtokgVQ5Hb0LUnA8:M0Vfdkn/MjgR3Gdx90onP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16f90825b828d88c9ac13fa6477f538_JaffaCakes118

Files

c16f90825b828d88c9ac13fa6477f538_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0d1241185024d24b0983f936fdad258

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontIndirectA
GetTextExtentPoint32A
CreateDIBSection
SaveDC
EndDoc
SelectObject
Rectangle
Ellipse
SelectClipRgn
SetMapMode
GetTextMetricsA
DeleteObject

msvcrt

_ltoa
malloc
tolower
_itoa
wcsncat
wcsncpy
fgets
strcmp
_exit
_stat
memcmp
iswctype

user32

GetSystemMetrics
InsertMenuA
AppendMenuA
GetCapture
IntersectRect
GetMenuItemCount
DefFrameProcA
EndDeferWindowPos
GetPropA
ReleaseCapture
SetCapture
TrackPopupMenuEx

kernel32

TerminateProcess
VirtualQueryEx
QueryPerformanceCounter
ExpandEnvironmentStringsA
Sleep
IsValidLocale
GetLocaleInfoW
GetUserDefaultLCID
FormatMessageA
FreeEnvironmentStringsW
WaitForMultipleObjects
GetNumberFormatA
GetStringTypeW
GetTimeFormatA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ