4037d55ccc8cf3a94592d2b72bfbd799_JaffaCakes118 | Triage

Sharing

General

Target

4037d55ccc8cf3a94592d2b72bfbd799_JaffaCakes118
Size

396KB
MD5

4037d55ccc8cf3a94592d2b72bfbd799
SHA1

06a173236650a2ecc14e49c509f20b54e1928518
SHA256

730fe34d6907bb2f2247b250292f3e9bb91de3eb6a68892f8f65cef98dc120dc
SHA512

889d5a561c5668de7631c49fa85fd38216e56e0cb1d1629c6ef81142400fff50323fbbe5f179938d2cbc5ee796db0f209686833fafa6f9775cf38d4d263c1df5
SSDEEP

12288:eyHi0orWdWbihdpWH8sxCrkh7uvMB2IhyZ:unpbh0QZaMgI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4037d55ccc8cf3a94592d2b72bfbd799_JaffaCakes118

Files

4037d55ccc8cf3a94592d2b72bfbd799_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c944d094273f2f2e9c9415853064f4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestWakeupLatency

user32

GetDCEx

ole32

OleRegGetUserType

advapi32

SaferSetPolicyInformation

gdi32

SaveDC
RemoveFontMemResourceEx
Rectangle
PtVisible
PathToRegion
SetBitmapBits
InvertRgn
TextOutW
SetTextCharacterExtra
SetGraphicsMode
SetDCBrushColor
OffsetRgn
GetRandomRgn
CreateBitmap
CreateRoundRectRgn
DrawEscape
ExcludeClipRect
GetFontLanguageInfo
GetLayout
GetTextAlign
SetBkMode

msimg32

AlphaBlend

shlwapi

SHOpenRegStream2A

shell32

SHLoadInProc

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ