2742b5ea1cd0025f1a6dbcbf51b33ae8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2742b5ea1cd0025f1a6dbcbf51b33ae8_JaffaCakes118
Size

480KB
MD5

2742b5ea1cd0025f1a6dbcbf51b33ae8
SHA1

2865f4bcad2c58fe6beab90cd6ce46065906c3dd
SHA256

b8e63d216ffa604e6775713d2825f4ba2f7f1ac7068795cefa34f568e8ca2d72
SHA512

78628ec47cb1e63f8875a71f4cbbb42ad3bbdb4fed171ec8c1a7b62783377811ea13c80764128b28ca51f02a663f0de8ce51ab81cf4e8147d065147d5369cd1d
SSDEEP

12288:9KZm8Y7TQAxLg42/NHkThGABfrpwiijSxqlRNo3Jl5w8j:9KgZ7TQyLgJkT9Tpwi8SxqUX5w8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2742b5ea1cd0025f1a6dbcbf51b33ae8_JaffaCakes118

Files

2742b5ea1cd0025f1a6dbcbf51b33ae8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869fac6e264765ad6c4e928cdf06e278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
IsProcessInJob
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 591KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ