db4af77a6c83409dc5a2ee32b875aa7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db4af77a6c83409dc5a2ee32b875aa7a_JaffaCakes118
Size

32KB
MD5

db4af77a6c83409dc5a2ee32b875aa7a
SHA1

270fd07699d835388dba30f98fd9a053c58c0c1b
SHA256

49d0ee6f7ad9f091ee53eef24f2ba48b99b53079e01a5e03535f3588ffce8517
SHA512

3859c0024938f57a1ec7610d7bf2a500a57a6d121e4abdf8275dcf16f1eaa26c14e8ec93008113e504da68f9029e0020290cac394de093aaafa5ef51df65a083
SSDEEP

768:mL2pZcLeV7tziHEQf3mCXugi6IEjDXC83Due:o2rvztcu12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4af77a6c83409dc5a2ee32b875aa7a_JaffaCakes118

Files

db4af77a6c83409dc5a2ee32b875aa7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4aaa53221947575467da7dbebc19976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
GetACP
GetLastError
GetStdHandle
GetVersion
CloseHandle
CompareFileTime
CreateEventW
EnterCriticalSection
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FindResourceA
FindResourceW
GetTickCount
Sleep

user32

MessageBoxA

gdi32

BitBlt
CombineRgn
CopyEnhMetaFileW
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBitmap
CreateDIBSection
CreateFontIndirectW
CreateHatchBrush
CreateICW
CreatePalette
CreatePatternBrush
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile

Sections

.text
Size: 18KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 260B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ