f568a7d461368121065d898bd11f30aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f568a7d461368121065d898bd11f30aa_JaffaCakes118
Size

182KB
MD5

f568a7d461368121065d898bd11f30aa
SHA1

dcd02ea63ee9fc775d0755c9d0034b7024b88cfd
SHA256

431ac5dbc54034852ff02c93a3ef0795e9e7a0864a908ccadbb4b55fd8c483b0
SHA512

0735804cbfe97c84842ec5a10ce3010e85a0aeabd160dba2951acbff5efa7e8fc2acb0fc7514a19f2d080e193932176c217f49778725294cc4bbf4f58b97a081
SSDEEP

3072:EtecTtZlF86QayBfzHcpcz4QyG4vBwzlDZxbM3lkF9kKmHzlyDV:E7vlFrmBuKropSpZxbLFrmHsV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f568a7d461368121065d898bd11f30aa_JaffaCakes118

Files

f568a7d461368121065d898bd11f30aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23b958bb508e69d59a2840b8f6798f54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

winmm

timeGetTime

kernel32

FlushInstructionCache
GetVersionExA
LocalFree
ExitProcess
ExitProcess
SetLocaleInfoW
LocalAlloc
LoadLibraryW
GetModuleFileNameA

user32

DestroyMenu
ClipCursor
CreatePopupMenu
FindWindowA
RedrawWindow
TrackPopupMenuEx
GetDesktopWindow

gdiplus

GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePixelFormat
GdipDisposeImage

rpcrt4

I_RpcFreeBuffer
UuidCreate

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ