f7107eb9f355b66240979e0e95b4f376_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7107eb9f355b66240979e0e95b4f376_JaffaCakes118
Size

170KB
MD5

f7107eb9f355b66240979e0e95b4f376
SHA1

f2ec2a0da28d9f6ddebd7fb49eb29369e12dc08b
SHA256

40b403d7a4fe229afef8434e0f977bfc3b26a857ee85cc436a5dcfa40e244d61
SHA512

908528fdea7755ab1641ba2f9223802f1f2b6596eeb23805a51a1dc24431629b23aa53b8d32916b34ef6366d6981e2ff6ba6d8d74da0a0e3d10587bd05fe2408
SSDEEP

3072:nGl8eP/8ymhV3emcNPhxxN226UxNfx2vI/093MNeRaGu3:GlTPTmimcRxN/6krWIpcBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7107eb9f355b66240979e0e95b4f376_JaffaCakes118

Files

f7107eb9f355b66240979e0e95b4f376_JaffaCakes118
.exe windows:5 windows x86 arch:x86

44a8731ad7350feab9b733ae1a958cd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\WxzezUnz\fLIfmer\AVlvbIuYyccO\oiDlYzcowlYq\sctTDcQwbbuu.pdb

Imports

msvcrt

_controlfp
__set_app_type
toupper
iswalpha
__p__fmode
__p__commode
fprintf
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs

user32

SetRectEmpty
GetForegroundWindow
ReplyMessage
keybd_event
SetMenu
UnloadKeyboardLayout
EndDialog
LoadIconW
SetScrollPos
CreateAcceleratorTableW
SetDlgItemTextW
CharUpperW
CheckMenuRadioItem
wsprintfA
MapDialogRect

shlwapi

StrRChrW
StrFormatByteSize64A

gdi32

SetDIBits
CreateHatchBrush
GetStockObject
MoveToEx
GetTextMetricsW
CreateDCW

kernel32

GetLocaleInfoA
GlobalFree
LoadLibraryA
GetAtomNameA
GetModuleHandleA
DisconnectNamedPipe

Exports

Exports

?GeometryTranslate@@YGHPADK|U

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE