ea3f06312238f9c9cf2282b77d4077d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea3f06312238f9c9cf2282b77d4077d9_JaffaCakes118
Size

111KB
MD5

ea3f06312238f9c9cf2282b77d4077d9
SHA1

290edc06d5e7d63e663bb6e55002c96ae09bb493
SHA256

4db9b5961b7e92d8f05fcfde384d69a3ab5771d3afad7e271edfecd1a50a150c
SHA512

027b0e2f663e7d1724a92ffd418df5b1381e1a06abba2993a748589ee675532eaf3d7b7d8cdef73d104a041200798337d320d373ec0f4f0483a21c7e01d9115a
SSDEEP

3072:8/P8pfiyvrxtB5aOuuRNoYZT1/Je/BSZzVKG:WPqfRtBwOPRFZTNJc8rKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3f06312238f9c9cf2282b77d4077d9_JaffaCakes118

Files

ea3f06312238f9c9cf2282b77d4077d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE