dd395a7c73a38fc35d96b600626693e8_JaffaCakes118 | Triage

Sharing

General

Target

dd395a7c73a38fc35d96b600626693e8_JaffaCakes118
Size

182KB
MD5

dd395a7c73a38fc35d96b600626693e8
SHA1

fe66edb5ac1bc7c78ffcda9f455d9a09dfbf2678
SHA256

66b19337a91ccb8633b904211a02ada38e1de661588964b5205a76fdb0f89118
SHA512

4032c348bc274b4d3e42d64fbdd9b9f9faa3f7e887c488d3a4e676c9ee6b7850457cfd7aa47777e3acf2cff26006cf71c297bd37b0e9e6374cf892c4c7bde265
SSDEEP

3072:UEgFq0+NCbW+rmhJOECdrbHpbOLZOm3ffE4+GWZw7gKjXf+IxBQqp8in:KFq0+kb1KQ72F3ffdEW71DXxBXiin

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd395a7c73a38fc35d96b600626693e8_JaffaCakes118

Files

dd395a7c73a38fc35d96b600626693e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c42947e5fde1bed6337b9bfc40462bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

I_RpcFreeBuffer
UuidCreate

msimg32

AlphaBlend
TransparentBlt

winmm

timeGetTime

kernel32

FlushInstructionCache
LocalAlloc
LocalFree
LoadLibraryW
ExitProcess
SetLocaleInfoW
GetVersionExA
ExitProcess
GetModuleFileNameA

gdiplus

GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipDisposeImage

user32

RedrawWindow
ClipCursor
FindWindowA
DestroyMenu
CreatePopupMenu
TrackPopupMenuEx
GetDesktopWindow

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ