01d020e026380ff8d32e0598db2689bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d020e026380ff8d32e0598db2689bc_JaffaCakes118
Size

86KB
MD5

01d020e026380ff8d32e0598db2689bc
SHA1

02270ea9d1bec746b83e5fc0654352c1319b03c6
SHA256

407bc69c9efe47f62974fc1a54be0f5681e67819e4ddf5cb4400b341aad67fff
SHA512

5301acc9b4d7deeb9c9bd04a261a61685cd6178694d8f951102812c3f977e1b71db07f5ddf690b1ca574300813ea62627f397f7b1b1909eab7dba3aed2191193
SSDEEP

1536:QcX2If2tJ2MBovLIxFNu+9wY+osBfomCn0kvAZ0+sHxD7duq:jBXMMIohLAm60R0pJJuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d020e026380ff8d32e0598db2689bc_JaffaCakes118

Files

01d020e026380ff8d32e0598db2689bc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f9acd25556934f390f8778d023472034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
EndPaint
RegisterClassExW
GetAsyncKeyState
GetDoubleClickTime
GetCapture
SetWindowTextA
GetDesktopWindow
EnumChildWindows

gdi32

GetTextColor
GetStockObject
CreatePolygonRgn
DeleteObject
GetBrushOrgEx

comctl32

ord17

kernel32

LocalSize
GetTickCount
SetEndOfFile
SetFileAttributesA
SetHandleCount
GetDateFormatA
GetEnvironmentStrings
HeapFree
LocalAlloc
LoadLibraryA
FreeLibrary
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
HeapAlloc
HeapCreate
GetCurrentDirectoryA
GetEnvironmentVariableA
LocalFree

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ