0005772b14d18ad9cd991356a1014853_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0005772b14d18ad9cd991356a1014853_JaffaCakes118
Size

637KB
MD5

0005772b14d18ad9cd991356a1014853
SHA1

4b8c0849735fe40419cb291c1623b21539ab17d7
SHA256

40e474ed2d8b79386778c291117d30bdbf62cafacf8c599e4885b5291c7063a4
SHA512

f822db0c833af3fa5e1bd4acf22a541a37e38d9690d7e0172ed451360a9353680b4af06a6b33487c3e07bae68c2cca1c6319411a975a30f2dd155d9c758f97cb
SSDEEP

12288:J0M/y2VGLfXlKKkY7CNrBs8GpS5mo+hOgWkLdBPeiz/tygo:bJGzoNY7CNrBFI66DbWg/tro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0005772b14d18ad9cd991356a1014853_JaffaCakes118

Files

0005772b14d18ad9cd991356a1014853_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9c9eaf247cb5e4cdaa18b9358e652fb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\mainstream\archive.pdb

Imports

msvcrt

_isctype
abs

kernel32

CompareStringW
lstrcmpW
FindResourceW
MulDiv

user32

UnloadKeyboardLayout
GetNextDlgGroupItem
EqualRect
GetActiveWindow
UnionRect

Exports

Exports

colorpix
?adjustRectLuma@@YGEUdrivenumberA@@PR

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.esap
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.case
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ