159e2e092cd2ef21062f8d78d058f5a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159e2e092cd2ef21062f8d78d058f5a3_JaffaCakes118
Size

340KB
MD5

159e2e092cd2ef21062f8d78d058f5a3
SHA1

7a23d0b646fc997552383ae2e6f4ccf279323abf
SHA256

12e70eb65488405bb7ceeace3a6543c509a473a5f067387fb6b0c3397e3dcf18
SHA512

bd8c0149fbadc75159bc2338f78a22924744e4a4bb8846fb8c266409e4dfc7eb9467697d046e5f18b1b6355e07476592d75c1da08eb3a57626b4eb107dd7378b
SSDEEP

6144:LXb95unx1AjYyeEwni4st5XGlLF0hqKZuPaKA/en9CKo7:zb90nx1aYijFZuPaKR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159e2e092cd2ef21062f8d78d058f5a3_JaffaCakes118

Files

159e2e092cd2ef21062f8d78d058f5a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb7692594ce3c748242dc03777cfd1f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FrameRect
EqualRect
FillRect
EnumWindows
FindWindowA

kernel32

GetOEMCP
GetLastError
GetModuleHandleW
ExitThread
lstrlenA
ExitProcess
GetProcAddress
IsBadHugeReadPtr
LoadLibraryExA
LoadLibraryA
GetModuleHandleA
GlobalAlloc
GetACP
VirtualAllocEx

comctl32

ImageList_Destroy

Sections

CODE
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ