52560761fd6bad026c6eb279dc00d7da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52560761fd6bad026c6eb279dc00d7da_JaffaCakes118
Size

155KB
MD5

52560761fd6bad026c6eb279dc00d7da
SHA1

5cf5d1ee31695b27e54084886096240e6726b9ec
SHA256

9f8dc659fd990adaf2510e87d0105feac3b25b91e6dd1244b9ac73e36fbb2551
SHA512

4348d1bfd2db6b363ce75982cf4e3aa5545853b95f137d709c778b2650682092cb127e3e5737a9e317f055e2232e49b7bdb9a826baea495bef7b83812c3bb796
SSDEEP

3072:F8PO136G1bJZ3DqchwG2a1iSld9N97GbOFYO3BUew5UHYsYIo:F2O13hHZ3J1NZGbOFTpfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52560761fd6bad026c6eb279dc00d7da_JaffaCakes118

Files

52560761fd6bad026c6eb279dc00d7da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1e386e0489f3000f7c1349585ade3b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

wsprintfW
GetAncestor
GetMessageW
SetTimer
PostThreadMessageW
TranslateMessage
KillTimer
CharUpperW
GetDC
DispatchMessageW
CharNextW
UnregisterClassA

winspool.drv

DocumentPropertiesW

kernel32

lstrcpyA
lstrcpynW
FindClose
WideCharToMultiByte
GetCPInfo
GlobalAlloc
CheckRemoteDebuggerPresent
lstrcmpiW
EnumResourceTypesW
lstrlenW
LockResource
GetTickCount
OutputDebugStringW
lstrcpyW
InitializeCriticalSection
GetACP
MultiByteToWideChar
GlobalFree
GetLastError
DeleteCriticalSection
GetModuleHandleW

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ