574fa060ace1c8677ddf3861c103776b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

574fa060ace1c8677ddf3861c103776b_JaffaCakes118
Size

10KB
MD5

574fa060ace1c8677ddf3861c103776b
SHA1

da78d5d6c77843dae15f48fa6a90aed68729b313
SHA256

dbf5d7a6aa51792d34e13517f5f19c700c9c083ba8ba9b6677a207d365816259
SHA512

8d079028e7c7c71adaa043b22e320e6fbd940607d4a9b08c1659b6637df397b041f789246f6a1d56f00fccee419c80755314fbf10cb08933c344c45f70c78570
SSDEEP

192:iCmqFm5ofoBi5dhdRs68FKEftJoIudey:iCmoWBadp8wEfID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574fa060ace1c8677ddf3861c103776b_JaffaCakes118

Files

574fa060ace1c8677ddf3861c103776b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b50e7512dbf0db43d4848458c8d75b80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
EnumWindowStationsA
GetScrollBarInfo
RegisterDeviceNotificationW
EqualRect
InflateRect

kernel32

GetLastError
VirtualProtect
LZCloseFile
lstrlen
GetSystemDefaultUILanguage
FindNextChangeNotification
QueueUserWorkItem

gdi32

SetBoundsRect
GdiInitSpool
GetDeviceGammaRamp
GdiEntry14
DeviceCapabilitiesExA

Sections

.text
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE