40355813e54c29b6a77bb51e3baf34f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40355813e54c29b6a77bb51e3baf34f2_JaffaCakes118
Size

42KB
MD5

40355813e54c29b6a77bb51e3baf34f2
SHA1

2f7e29c79377d882a72a25258ca5ec46acf0e5af
SHA256

e6a0cf6913febd96e88dc467e49cdef8256a2aa2c23c5705607ae8fd7a05c74b
SHA512

d2795edb33a9a0fe4e77ac620628ddd3bc21c211f6ede61afdb612c97952150a24a7b2300f4afcff445d83b129b4bdefb9b74409ca566443c4159c7b565d6d76
SSDEEP

768:+16nQkMMJ7et3p3NQyNT1jX6eugS8eHkDi7+dp6BuY2AHpVJgN:+O3et3JNQQwAFDvOQgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40355813e54c29b6a77bb51e3baf34f2_JaffaCakes118

Files

40355813e54c29b6a77bb51e3baf34f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a7b63e0c11a942336db18db3674c85d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableMenuItem
EnableScrollBar
EnableWindow
EndDialog
EmptyClipboard
EndPaint
EqualRect
FillRect
GetCursor
DrawTextA
DrawStateA
DrawMenuBar
DrawIcon
DispatchMessageA
DrawCaption
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
EndMenu
DeleteMenu

kernel32

EnumResourceNamesA
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
EnumResourceTypesA

gdi32

Polyline
Polygon
PolyTextOutA
GetTextColor
GdiFlush
FillRgn
PolylineTo

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE