JaffaCakes118_99b04d3795ea642bcac076dd31c86826 | Triage

Sharing

General

Target

JaffaCakes118_99b04d3795ea642bcac076dd31c86826
Size

184KB
MD5

99b04d3795ea642bcac076dd31c86826
SHA1

6f31ca127393d37244be041a78b57bd16e19340e
SHA256

24aa58f6c201f91fb1ccc0e12ee2d8442945aa9ede390e7f41dbf97823a00535
SHA512

640290f503bafe0efeb5af3caa72114f37eab7e93351eea970257111d1276540e775b270b2bab4568395982bf384d9bbc342ef27a2fe1298e42e25c4c1b07e2d
SSDEEP

3072:tClbp7aqoeoCFCyvS5KRFBAuysFdQ6aDHJt5jMyFoTw4ZMnG1LyQIqxnl0i8wt:UlbRXEKRXxyjlDHJt5R14unWjswt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_99b04d3795ea642bcac076dd31c86826

Files

JaffaCakes118_99b04d3795ea642bcac076dd31c86826
.exe windows:4 windows x86 arch:x86

9fb80f3164bf718553fe96016f3738b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

user32

RedrawWindow
TrackPopupMenuEx
FindWindowA
CreatePopupMenu
DestroyMenu
ClipCursor
GetDesktopWindow

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

msimg32

AlphaBlend
TransparentBlt

rpcrt4

I_RpcFreeBuffer
UuidCreate

kernel32

GetModuleHandleA
TlsGetValue
GetVersionExA
GetModuleFileNameA
ExitProcess
GetCommandLineW
TerminateProcess
TlsSetValue
GetCurrentProcess

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ