de45ecdf1b9e0975a78779d1cabe2751_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de45ecdf1b9e0975a78779d1cabe2751_JaffaCakes118
Size

74KB
MD5

de45ecdf1b9e0975a78779d1cabe2751
SHA1

ef9246e22f3280e8245a0b23c782c87ab664cdff
SHA256

6b70b60bb64504597407a637e315460bae33a9335becd38c4519f713c67bd1fb
SHA512

dd815c6d8693ec243c75e0fe3ba8ee6420c05f4cc2ea9a40a760a56dc59d292663da228fd4608b7ff46c92417f57f5a07c125c70148a3fc8330ec07fdea8fcb6
SSDEEP

1536:Lyn2e7RlaZzkTD6Jdy9pF5er9YweDCZik142NIGg8jau:ADWk3l9pF5G9Yz2gk1tNIGXj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de45ecdf1b9e0975a78779d1cabe2751_JaffaCakes118

Files

de45ecdf1b9e0975a78779d1cabe2751_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE