1594ac1718a14c425b5fdfaa08ce79ec_JaffaCakes118 | Triage

Sharing

General

Target

1594ac1718a14c425b5fdfaa08ce79ec_JaffaCakes118
Size

60KB
MD5

1594ac1718a14c425b5fdfaa08ce79ec
SHA1

95cf6f244c7d8a34271867f1edf8164d89cafdb1
SHA256

7d3d54c9a79c8f742a897c8256012e18eba2a83fd57578d1166f31a5a8b412c4
SHA512

fbc82c708232f35ecd948ad554a7accd0531857e04ae87d3c024b80ec40d0c522a8f2340354dfd562651162293b30c3dd0f21457da621d07401fbdcb4eaadf6b
SSDEEP

768:IF2we7BgidqpqPIqkSkrKZADrjZC7AXn/ao7X4sCopzJtKHwvby6r4RTjQf/4EKq:IsNtgWQqQEQK8Xx3/PTP+wvbpMXEkd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1594ac1718a14c425b5fdfaa08ce79ec_JaffaCakes118

Files

1594ac1718a14c425b5fdfaa08ce79ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cda7c95a2451f0124e278bdbcc77ea6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA

ntdll

RtlDestroyQueryDebugBuffer
RtlDeleteRegistryValue

user32

ExcludeUpdateRgn
GetWindowRgn
PaintDesktop
ReleaseDC
SendMessageW

gdi32

CreateScalableFontResourceA
GetBkColor
GetArcDirection
GdiGetBatchLimit
CreateEllipticRgn
CancelDC
ArcTo
GetRandomRgn
GetTextColor
GdiAlphaBlend
StrokeAndFillPath
SetStretchBltMode
SetRectRgn
SetPixelV
MaskBlt
InvertRgn
GetPolyFillMode

shlwapi

SHFreeShared
SHRegGetValueW
PathSkipRootW

shell32

SHGetIconOverlayIndexW

snmpapi

SnmpUtilAsnAnyCpy

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE