13ede12a02ff39e3716878e8fb67c182_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13ede12a02ff39e3716878e8fb67c182_JaffaCakes118
Size

31KB
MD5

13ede12a02ff39e3716878e8fb67c182
SHA1

cf3f48f33b3d37a4b8122d36803f9b27187747d3
SHA256

05be43c373f434f78aefa14dbb29bba66f66c2660560fc22a36fd64cd83df396
SHA512

67fd7699d92502330026a4472b2b1a770fcaa98b4c7051c1faec92181c11d8286578e66fa0c7fa161ce49657a1f5f0a071e195bea88d8dd25d583a007c58a662
SSDEEP

768:FXLevwd0XmuoA3IkaqH+fKuxXv/GQDnD8xg:Fbq8u9HaqeflxXvO0D/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13ede12a02ff39e3716878e8fb67c182_JaffaCakes118

Files

13ede12a02ff39e3716878e8fb67c182_JaffaCakes118
.exe windows:1 windows x86 arch:x86

daa852c2508103ee3943c4406b52ba2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiber
GetCurrentProcessId
SetCurrentDirectoryA
OpenEventW
WaitForMultipleObjects
GetModuleHandleA
CopyFileExW
VirtualAlloc
GetModuleFileNameA
ExitProcess
GetTempFileNameW

user32

InsertMenuA
LoadIconW
SetParent
IsIconic
CharPrevA
GetDC
ClientToScreen
PostMessageW
CharLowerA
GetIconInfo
MessageBoxIndirectW

gdi32

CreateDCW
CreateCompatibleBitmap
SaveDC
DeleteDC
CreateFontA
SetDIBits

advapi32

RegSaveKeyW

comdlg32

PrintDlgExA
FindTextA

shell32

StrNCpyW

ole32

CoInitializeEx
CoCreateInstanceEx

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ