130e81f8d8e035b9606a1c35ac5d7194_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

130e81f8d8e035b9606a1c35ac5d7194_JaffaCakes118
Size

109KB
MD5

130e81f8d8e035b9606a1c35ac5d7194
SHA1

939420fc40577d4f79366bf90c7f286715c3f7e0
SHA256

e9a01a86388a3b1092ad265e173fb8a8c778620d045278cbcdbc8067af3e5ea7
SHA512

e8aec4a80801a6e3363aaf249858ddbd34f2e6cbb5bc5afe5c7f6ddba0c2b2bf7b81865a94a71e07ddebd690281e16176bd07753381464f8142a5481066fb235
SSDEEP

3072:9lm/do1teTqMCRyxkTzdby8PonCnVqYi8/:HmFmeF9WEfBYi8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130e81f8d8e035b9606a1c35ac5d7194_JaffaCakes118

Files

130e81f8d8e035b9606a1c35ac5d7194_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ea93b8538db441eb44838660f59e5fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
FlatSB_SetScrollPos
ImageList_Add
ImageList_Merge
GetEffectiveClientRect

kernel32

CreateProcessW
EnumDateFormatsExW
FindNextChangeNotification
FreeVirtualBuffer
GetCPInfo
GetConsoleFontSize
GetDriveTypeW

Sections

.text
Size: 72KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE