5364aa7020434400ddb0413cfbb2ace7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5364aa7020434400ddb0413cfbb2ace7_JaffaCakes118
Size

1.0MB
MD5

5364aa7020434400ddb0413cfbb2ace7
SHA1

c951fdd6a9273674656ddd0959128580dfc6e46c
SHA256

1ec82e349a45c61290ece6e5756cb4afe848bd0fd6b36d109b7102532b0c9c8e
SHA512

d2676c17080983e64dbb2708b5f595e5dcf45b9ad34b66bdbc26b34c98d0b1fc0710d6adf61ce4cabb6107cb053003a3f20dccb84037b7638e23a399a784d99d
SSDEEP

24576:gm9cUIsFgUktDBTvx3/+kyjTGWvr2wCaCkeV3pkdl6xR4+euX0r18C8ylTPZPPzX:p9HICzk/jx3G/TGWvr2wCaCkeV3pkdlf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5364aa7020434400ddb0413cfbb2ace7_JaffaCakes118

Files

5364aa7020434400ddb0413cfbb2ace7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

966995abc3ac96390f1018d08ef2153b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetStartupInfoA
GetLastError
lstrcpyA
Sleep
GetVersionExA
GetTickCount
GlobalAlloc
GetModuleHandleA
lstrcatA
GetCommandLineA

gdi32

ExtTextOutA
SelectObject
CreateSolidBrush
GetDeviceCaps
PatBlt
GetTextMetricsA
LineTo
CreateFontIndirectA
GetStockObject
GetObjectA
BitBlt
MoveToEx
SetROP2
GetTextExtentPoint32A
CreateCompatibleDC
GetBkColor
DeleteObject
SetBkMode
GetTextColor
GetPixel
SetPixel

Sections

.text
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1021B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ