d4e17c28758f3521b605a81b2709fbf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4e17c28758f3521b605a81b2709fbf5_JaffaCakes118
Size

9KB
MD5

d4e17c28758f3521b605a81b2709fbf5
SHA1

5349baf5ea9640b79731490cb6be7e369203c3f7
SHA256

1679a44ae3b2008515a5f1384521125e9282ad161f99d5f85aa5e2a96b9b2c64
SHA512

538e6c959a36b961b4f14499929c4011312163932f59b4d8bcf457484a09ea924322c9b9a94d78f175c7afc92743ee63d19d42ca0f7301ef459a042be3e4d168
SSDEEP

192:8PIGLy6dGonYe3nZgfQtllq3VKXVroK7S9:8PIGLy6dRJXZPMlKlroIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4e17c28758f3521b605a81b2709fbf5_JaffaCakes118

Files

d4e17c28758f3521b605a81b2709fbf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c57e56add886d8f600383920b309550

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
DeleteDC
SelectObject
CreateCompatibleDC
CreateSolidBrush
ExtFloodFill
GetPixel

user32

LoadIconA
MessageBoxA
LoadCursorA
GetSysColor
PostQuitMessage
RegisterClassExA
SendMessageA
SetMenu
ShowWindow
GetSystemMetrics
UpdateWindow
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
TranslateMessage
LoadMenuA
MoveWindow

kernel32

GetModuleHandleA
GetCommandLineA
ExitProcess

comctl32

ord6
ord17

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

DragQueryFileA
ShellAboutA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE