de911dd1a6502032091fd6fbb8fe7af5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de911dd1a6502032091fd6fbb8fe7af5_JaffaCakes118
Size

178KB
MD5

de911dd1a6502032091fd6fbb8fe7af5
SHA1

fd6edcd2df54d3639572f4f73935261eded9b9d1
SHA256

4dd01ddfb0f07464c9ed1ff416ddb245eb0f515ca6bf36fc66e3fff40c8147aa
SHA512

13912c01c929e8d76785f94413e8023d6f0339d308b611eb7b29646c892ad2b80342f9f16c264734c79fa5ff8ef23eb4d4531d59e2d2606f9329548317b9608f
SSDEEP

3072:7Fz4V7d6gVE224pftPMxpPNEXm8VLa7Fw9kDzC0tYn6pd7P:gfE2ztPyCVdEwsY6d7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de911dd1a6502032091fd6fbb8fe7af5_JaffaCakes118

Files

de911dd1a6502032091fd6fbb8fe7af5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d584a1b88ff000986bb96c54410fd6bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

FlushInstructionCache
GetVersionExA
LoadLibraryW
LocalFree
ExitProcess
SetLocaleInfoW
LocalAlloc
ExitProcess
GetModuleFileNameA

gdiplus

GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipDisposeImage

user32

CreatePopupMenu
ClipCursor
FindWindowA
DestroyMenu
RedrawWindow
TrackPopupMenuEx
GetDesktopWindow

rpcrt4

I_RpcFreeBuffer
UuidCreate

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ