44309aef076abc14e65c32e9426f0861_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44309aef076abc14e65c32e9426f0861_JaffaCakes118
Size

19KB
MD5

44309aef076abc14e65c32e9426f0861
SHA1

928153b310efdf524b3aa8e7d61ee7c6f981d7dd
SHA256

e273c734d9907ae8de32cdaaba29fc69277f19411027c8b301c44635c0c91597
SHA512

928eb32eacb0d0ac0c75881ddaf1f4f2bc428dcdc4bdb1fc86d99a176bf37b375c6f88216d6baeabe9ab200adac7b5aff679e0f4fa796dc38fca5ac8922966cb
SSDEEP

192:K8L+i/18Cy/tuxdh2vt9B9c/UR54Iw0BgYamemyl66SfbWe7/At:K8L+P/tuV2vtOcvw0BgLmMJSzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44309aef076abc14e65c32e9426f0861_JaffaCakes118

Files

44309aef076abc14e65c32e9426f0861_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b996da5686d63069d42c59dab1e7a00a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
LocalAlloc
CreateEventA
lstrcpyA
GlobalAlloc
GetLastError

user32

BeginPaint
CreateWindowExA
TranslateMessage
ScreenToClient
SetWindowTextA

msvcrt

__getmainargs
exit
_except_handler3
wcslen
_adjust_fdiv
_initterm
wcstoul
wcschr
_acmdln
_XcptFilter
_exit
__CxxFrameHandler
__set_app_type

gdi32

BitBlt
CreateFontIndirectA
GetDeviceCaps
GetTextMetricsA
DeleteObject
GetPixel
MoveToEx
SetPixel
GetStockObject
SetROP2
SelectObject
SetBkMode
PatBlt
GetTextColor
LineTo
GetBkColor
GetObjectA
CreateCompatibleDC
ExtTextOutA
GetTextExtentPoint32A
CreateSolidBrush

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ