f3db997b169a2cc6dd5ca5f8ae157ff2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3db997b169a2cc6dd5ca5f8ae157ff2_JaffaCakes118
Size

203KB
MD5

f3db997b169a2cc6dd5ca5f8ae157ff2
SHA1

2041951b20f2596758c17420c98cf0431d179fb3
SHA256

b7fd161e7492638fa683d6ead4a18941d16ecbd399cff8b12bd20b154e91bd55
SHA512

4a59e499118fecc4630202893d5d7dc3281a83209f1f30f4e039a385803d2cd8e3f0a478e0332b42e9d2953b19ec483b35c8a69c37a00cf90a5bd228287ab152
SSDEEP

3072:EEboIex7JbMRieLJh0ovPaL0qzg5jCNs/qJFw7Kj+O0YPWpw:yIGJbMRLJhVPBnjCa/oSI+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3db997b169a2cc6dd5ca5f8ae157ff2_JaffaCakes118

Files

f3db997b169a2cc6dd5ca5f8ae157ff2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

17fcd786e1a308b9ea6dee49dda53938

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AssignProcessToJobObject
CreateIoCompletionPort
LoadLibraryA
LockFile
FreeEnvironmentStringsW
SizeofResource
AttachConsole
VirtualAlloc
GetProcAddress

user32

GetMenuState

gdi32

LineTo
StrokePath
CreateCompatibleDC
BitBlt
GetTextCharsetInfo

Exports

Exports

bubanuvf
qcfjqjrs
rrurghqqjfdisc

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ