395280187f0746bd331ac45b63c96ca2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395280187f0746bd331ac45b63c96ca2_JaffaCakes118
Size

699KB
MD5

395280187f0746bd331ac45b63c96ca2
SHA1

ca1f34c2d41b302551d2efa12363d8cb435f79ae
SHA256

df1ca99aeee700eda1390dd4248c5df0f0abf9dcd76938c7ca4870625d8d4755
SHA512

7ad8a41bfa141c367e3dbb4b0a546667598f412459ab858b62d05a6a13e6ea5e7e5f7fe296afc6b52235be653e072c17d9228481b0bd2715259f9d5ac3903774
SSDEEP

12288:Vspu6j5lhGzPP3jVvpk1jmLHWix7XX3SRvgOXeAxqe0X:z6NlhGTP3RRk1jmTBBXHiEqo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395280187f0746bd331ac45b63c96ca2_JaffaCakes118

Files

395280187f0746bd331ac45b63c96ca2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46e2837bbc7f5c4b0ae9c8d7097540ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
LocalFree
lstrcpyA
FreeLibrary
GetStartupInfoA
GetVersionExA
GlobalFree
LocalAlloc
GetTickCount
CreateEventA
Sleep
GlobalAlloc
GetFileSize

user32

GetSysColor
ShowWindow
DialogBoxParamA
MessageBoxA
GetClientRect
LoadIconA
DefWindowProcA
DestroyWindow
SetFocus
TranslateMessage
GetWindowRect
BeginPaint
CreateWindowExA
DispatchMessageA

gdi32

SetROP2
DeleteObject
SetBkMode
GetTextMetricsA
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
CreateSolidBrush
CreateFontIndirectA
GetDeviceCaps

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ