c93c9498e8a02c9d697a83d2f7a7611f_JaffaCakes118 | Triage

Sharing

General

Target

c93c9498e8a02c9d697a83d2f7a7611f_JaffaCakes118
Size

151KB
MD5

c93c9498e8a02c9d697a83d2f7a7611f
SHA1

e63f6224e75a93c1dd1882b24d8671e182f0b8ff
SHA256

b0ddebfc016b22a8fda1eee08fa00bcd25f374ccf2f4490845acf2a586dc5736
SHA512

fc7a9de67993b72b279e2863580dc93a4cc38136355676549186048eb3562efbbf3c1dff31836f472f4b0d14a13628723fa4bca8bfef5a4ffebf6438df304b51
SSDEEP

3072:EGGmWrpem3nhaMKF5NHNSCtIwI/CkwPJxeeTP1vP0s+IVGC4E46uvD:usWoT/wQIwCCrJxeQP1vjr4tjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c93c9498e8a02c9d697a83d2f7a7611f_JaffaCakes118

Files

c93c9498e8a02c9d697a83d2f7a7611f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7604411bf4befc59a7de3ad2c8363779

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnicodeToCustomCPN

user32

SetDlgItemTextA

gdi32

WidenPath
SetPolyFillMode
SaveDC
RestoreDC
RemoveFontMemResourceEx
Rectangle
PtInRegion
PolyPolygon
PolyBezierTo
OffsetRgn
Arc
CreateDIBPatternBrush
CreateRectRgn
CreateScalableFontResourceW
ExtSelectClipRgn
FillRgn
FlattenPath
GdiFlush
GetPixel
GetPolyFillMode
GetStretchBltMode
MaskBlt

msimg32

TransparentBlt

shlwapi

PathRelativePathToW

shell32

SHCloneSpecialIDList

dssec

DSCreateISecurityInfoObjectEx

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ