29124928466017d82a0dfa21e0fb9730_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29124928466017d82a0dfa21e0fb9730_JaffaCakes118
Size

22KB
MD5

29124928466017d82a0dfa21e0fb9730
SHA1

05870c19a7b3fe81d3bed1e5c1ab353b1078c427
SHA256

c0c2f1e1f3b171986a5036011d175b75ac8d57fcf44f776487e493b9206c1f7e
SHA512

9a350615e0e799a0782dfd39f6d6be3720143ce0cfd43a7e5ebdc67df15d875cc62b6a6030611e408ec275bc301538574c5ecece6dae778efceaf1427019e4db
SSDEEP

384:A4q5jjYcOV64WMQef5hJBDUaAHTJe6O5ylQbK+R4Low7XXh7wqjSRd:A/ilT3BDDAHTJeNwQOh8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29124928466017d82a0dfa21e0fb9730_JaffaCakes118

Files

29124928466017d82a0dfa21e0fb9730_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b98b2725c38b04c22e347a8f4252d8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
FreeLibrary
CreateEventA
GlobalAlloc
GetModuleHandleA
GetCommandLineA
GetLastError
GetTickCount
LocalFree
GetFileSize
CloseHandle

gdi32

GetBkColor
CreateCompatibleDC
GetStockObject
CreateSolidBrush
DeleteObject
MoveToEx
GetPixel
SetBkMode
CreateFontIndirectA
ExtTextOutA
SetROP2
GetObjectA
SelectObject
GetTextExtentPoint32A
GetDeviceCaps
LineTo
BitBlt

msvcrt

exit
_adjust_fdiv
_acmdln
__CxxFrameHandler
toupper
_exit
__getmainargs
__p__commode
__setusermatherr
wcslen
__p__fmode
memmove
rand

user32

CreateWindowExA
GetSysColor
DialogBoxParamA
GetWindowRect
TranslateMessage
LoadIconA
MessageBoxA
DefWindowProcA
EndDialog

Sections

.text
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrs
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ