05dd9d91d0a21ac3361d6c9aa3fa11cb_JaffaCakes118 | Triage

Sharing

General

Target

05dd9d91d0a21ac3361d6c9aa3fa11cb_JaffaCakes118
Size

44KB
MD5

05dd9d91d0a21ac3361d6c9aa3fa11cb
SHA1

0ef04973d36cd146c6524ff10d23979931a37452
SHA256

2755850dcb1f797ddee1cc7587d9f21c28f57e9d05f0dede74b2e2071f06599e
SHA512

12148f0c41737c6993e97d919d648183d55d400bfc4ba012902c723f73e4cd5e2d9e1e3857738dae07e93d7c9612f15c9c3cc7dc0f7ae055b47b05cfa25d0e9d
SSDEEP

768:PjVWKCU93DxJPnXb6s779yjWIlK/mk6rfhA0v2jyfKXOn:PBWKCmxJPLBViXzrfhxvqyfUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05dd9d91d0a21ac3361d6c9aa3fa11cb_JaffaCakes118

Files

05dd9d91d0a21ac3361d6c9aa3fa11cb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7c00c8c83ce27ea1de1f41137701e936

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePen

user32

VkKeyScanExA
WinHelpA
wsprintfA
wvsprintfA

kernel32

GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

Sections

.code
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ