dd521892f8f37c8576b0278758748acb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd521892f8f37c8576b0278758748acb_JaffaCakes118
Size

53KB
MD5

dd521892f8f37c8576b0278758748acb
SHA1

ea83e7daec95c2844b144f1d5af1268d14654f49
SHA256

c3611617fa1126fa20533642665a478b92fe28516e87ec2d1157077770e8c64d
SHA512

a6537f80e4ae4e7f13bad039adeeb0b4752fdd77dd2c828e617f635faf44c65a1ccf9efc8bbfa00b45ba01605984abfd8212ea7d732f6ecf9105e779af4719c7
SSDEEP

1536:uEqiSmUbtaazxkm6YBsJIyAUH/0pIn/T7Ot8:6idCtvzx6Y6JlAw/E0vw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd521892f8f37c8576b0278758748acb_JaffaCakes118

Files

dd521892f8f37c8576b0278758748acb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0324343f9a31dfdf3dd599a60163ab50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE