f481121df56b57b1ecb0e6f0f8c7eb68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f481121df56b57b1ecb0e6f0f8c7eb68_JaffaCakes118
Size

100KB
MD5

f481121df56b57b1ecb0e6f0f8c7eb68
SHA1

a6ccc6f6f643c2fecb1674b0c187b93d5cbd2e68
SHA256

35e4f1d2feb0d8f9d0c8288f822aea710a627433e6c66c37297d87b7ac0392d1
SHA512

9bf9021241d25d1f7db983f0cc3ac541e206f11656f215e8019921b492fc081ad1a9bfbac9e05a5666187d25f27966877ccf1ab6d585f5870812cff34fce4173
SSDEEP

3072:TPI8PJzJZ87RT7m9vSA+Yv2LSOD3mOqtrOe:ZPJcqvSA+Vp3mOqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f481121df56b57b1ecb0e6f0f8c7eb68_JaffaCakes118

Files

f481121df56b57b1ecb0e6f0f8c7eb68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0b5376fa23d2011e43ca183aaf0e66f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
dwOKSubclass
GetFileTitleA
ChooseColorA
FindTextW
CommDlgExtendedError

gdi32

AnimatePalette
CopyMetaFileA
AddFontMemResourceEx
CreateRectRgnIndirect
Chord

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE