fea96fb0550af1b3c443aa81f77bc6cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fea96fb0550af1b3c443aa81f77bc6cb_JaffaCakes118
Size

96KB
MD5

fea96fb0550af1b3c443aa81f77bc6cb
SHA1

095c240e3ff4319e70194c8cc697576a786d3f01
SHA256

67996927e8f18bc60e5920e840499ad62fa22fdb1eea22cc745ebf320637af20
SHA512

c2d1e64a2f385ae4fc74a3c79f182c035bd3e6a920be9b876f59527faf4f1a47a67c597240f06873d6bb06c7cec42972569e7871c7802f50fa3b41993f1c6769
SSDEEP

1536:/8TYQ2oOhHEGnJX7OFI2dKtWXKQNn4Yi2voCHR5r6XF1UTiou/7ZK:gh2oOhH/X72I2E0K04TaoCHR5iFq5q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea96fb0550af1b3c443aa81f77bc6cb_JaffaCakes118

Files

fea96fb0550af1b3c443aa81f77bc6cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7117932e13f139fdfc10fca459407204

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

Sections

.text
Size: 62KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE