f977008de8b886f1684e219da6576a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f977008de8b886f1684e219da6576a03_JaffaCakes118
Size

2.5MB
MD5

f977008de8b886f1684e219da6576a03
SHA1

505b7be31713c53dac5df78a1706c49052fa1cfa
SHA256

c8c3249474335d57d963009c6b3d1e9eb5aa39dcfe1e2d090ded5552e280886e
SHA512

3fee3ecde979032e3db93335eb185b0cc77068f979ce02b186f57d1d68e9eb51778fdbc985910a907116207ab171bdd9e717d3b0b7e3bcb9dcc6a13281d3ee55
SSDEEP

49152:OA/QzcgBvHYSyoD5H9hoCtV2NYBH61h+G:OwQwC5y25HDtVT2+G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f977008de8b886f1684e219da6576a03_JaffaCakes118

Files

f977008de8b886f1684e219da6576a03_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09e1baf000b818184893c5e12126c0d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
EndPaint
CountClipboardFormats
GetCaretPos
EnableWindow
SetWindowTextA
DialogBoxParamA
RegisterClassExA
CreateWindowExA

gdi32

GetStockObject
GetColorSpace
CreateRoundRectRgn
IntersectClipRect
GdiFlush
DeleteObject

comctl32

ord17

kernel32

HeapFree
SetFileAttributesA
GetLastError
GetDateFormatA
GetThreadLocale
GetTickCount
HeapDestroy
GetEnvironmentVariableA
GetStartupInfoA
FreeLibrary
GetModuleHandleA
HeapAlloc
HeapCreate
MulDiv
DeleteCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
GetEnvironmentStrings

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ