dd8244c47cad4f1141fb851e059b874a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd8244c47cad4f1141fb851e059b874a_JaffaCakes118
Size

117KB
MD5

dd8244c47cad4f1141fb851e059b874a
SHA1

780483d5ad54be5334c8512fb6dfed6ec31b20df
SHA256

86694e2bc6cb8df8f8d9246b41eea7b456ee7de4542dc438f715616aa27c789f
SHA512

67deff515b3ab7c1c60e6f3d0665ede700747ef2a31a5b1cb65cbb408d6bf69c8c6f2f6a819037f6ae3d345138d9ad30cf454e6f3bec56c06acab59a314270bf
SSDEEP

3072:nQKInJ3qtKT6K91LGyGspZw6wA7Ss62NfL:QKEdj91HGst7SHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd8244c47cad4f1141fb851e059b874a_JaffaCakes118

Files

dd8244c47cad4f1141fb851e059b874a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ad2b636babf959f32f88a58412262c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharLowerA
GetLastActivePopup
GetKeyboardType
IsWindow
GetKeyboardState
IsWindowEnabled
GetCursor
GetMenu
GetDesktopWindow

kernel32

GetProcessHeap
CreateThread
GetLastError
GetThreadLocale
VirtualAllocEx
CreateFileA
ExitProcess
DeleteCriticalSection

gdi32

GetDIBColorTable
GetDCOrgEx
GetDIBits
CreateFontIndirectA

shell32

Shell_NotifyIconW

Exports

Exports

FtUeoLN0A
_o5pNil4ejvx

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ