520ab5b1dcfe4fd4d70198bd93ca0258_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520ab5b1dcfe4fd4d70198bd93ca0258_JaffaCakes118
Size

158KB
MD5

520ab5b1dcfe4fd4d70198bd93ca0258
SHA1

f984845a8028e9373af103f2096255403480b055
SHA256

ec9d048f247e2584b81935543a60bc92bf3dab842a11c06729d22d8cf39489cb
SHA512

d568fbc2af8f4ff668666c2e954e9fc7d92671cfa4c4e5e210ef3075acce80fa50925a41c903c6c9fcac4d321542ceda2ede5350288f75fae2509e2dbd41c75e
SSDEEP

3072:JiVe9gW6DGmsilqvQT3LDhLuPDUjj2OlFcWkleevp5j4B:n9YqpBvQT7DoP4X2Oz6vvkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520ab5b1dcfe4fd4d70198bd93ca0258_JaffaCakes118

Files

520ab5b1dcfe4fd4d70198bd93ca0258_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6d3869f0d755413f791b9c17310c19a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ord29
PathStripPathW
PathIsFileSpecA

msvcrt

abs

kernel32

GetTickCount

Exports

Exports

AlphaBle-W
GradientFi-W
TransparentB-W
?RestrictAccessCMS@232GPAUHINSTANCE__@@U_COMMPROP@@-W
?RestrictAccessIO@232GPAUHINSTANCE__@@U_COMMPROP@@-W
?RestrictAccessIOS@232GPAUHINSTANCE__@@U_COMMPROP@@-W
?RestrictAccessMS@232GPAUHINSTANCE__@@U_COMMPROP@@-W

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ