04925ff07ff06126d776ae06186c4640_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04925ff07ff06126d776ae06186c4640_JaffaCakes118
Size

189KB
MD5

04925ff07ff06126d776ae06186c4640
SHA1

609b026cb85f32fb7bc78506ed00f7486c9d24e3
SHA256

0cb9a2dc572999ae27395e786f10a08225b3d693860a0fa98e5c312ea8fb97bd
SHA512

23a75db53fd54c201ca68751d02342cb8e4266fbd06e944d3a3572e13acac83423f39cb1c7f7a850b4deb81991e5771da374c31488cbb9299b96f71e4e51b874
SSDEEP

3072:+3Nr6AY6QHjHouyUv85OSFmJPy0GHN0MNt9hQF9NOldekBYD1L0bT8dsB/i0hepz:W5eryl5qaczNOzBYD1knGQSzkvg7s2ZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04925ff07ff06126d776ae06186c4640_JaffaCakes118

Files

04925ff07ff06126d776ae06186c4640_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d84a1f1a5f6dc478461d88b1a559382f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceGammaRamp
RectVisible
SelectFontLocal
CombineTransform

kernel32

ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ