5334e40bffdb26b43eaa897aa171e4aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5334e40bffdb26b43eaa897aa171e4aa_JaffaCakes118
Size

122KB
MD5

5334e40bffdb26b43eaa897aa171e4aa
SHA1

0d9d5c44efce90496e9dd338b5ba4527d7b726ac
SHA256

b3422d41e0d2804f0e3e64826429aba9e737f127d4e7ca82242d57b83ca83afd
SHA512

e076799db45fb2f9b73786af42add34f7729488b93f572c73053ce024fb4483df2a6dda7757672054ad54998c4c20c59cca7b266c1f32b477f9604582644a7bc
SSDEEP

3072:9omjB2RL2NWtmppYYAEk2HREZ9go6nQjSt:/B2RqQmrj1Rs76Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5334e40bffdb26b43eaa897aa171e4aa_JaffaCakes118

Files

5334e40bffdb26b43eaa897aa171e4aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5997b5a96df8e9cba7628b7e01fbadea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
ImageList_Draw
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Remove

gdi32

GetTextColor
SelectObject
RestoreDC
GetBkColor
SetPixel
GetBkMode
LineTo
BitBlt

kernel32

lstrcpynA
lstrcpyA
VirtualAllocEx
LoadLibraryA
WriteFile

user32

DefMDIChildProcA
DefWindowProcA
GetDesktopWindow
GetMenu
GetCapture

Exports

Exports

_gR8TKggqEVb@20
_KpU3ipNF8nq@8
_W8nYYsyqB5vK8A
_cQonnq2h4V@8

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ