07fa29c05904797d43a9aeb827e99fc9_JaffaCakes118 | Triage

Sharing

General

Target

07fa29c05904797d43a9aeb827e99fc9_JaffaCakes118
Size

430KB
MD5

07fa29c05904797d43a9aeb827e99fc9
SHA1

b3e282fd39d59b554b3c8d9528f47e07ab37ee7f
SHA256

c4e22a719360658a87270347358d5ec32eaf7d5055fb6d2a51577554a88fa9c9
SHA512

f06588e4e5d17a7f6b0a34ba91930ed2f1dc76c311ad2d7826bd70663e3e80e9302f2ff03031f4fc54a13b7a02e872e7f898e2dd156741fc65bd2df1c6a45161
SSDEEP

12288:df3KiaHCP29qTN3jcWREFhqLPciyFwxztArnS:l6zXUtjkFgnnxztCnS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07fa29c05904797d43a9aeb827e99fc9_JaffaCakes118

Files

07fa29c05904797d43a9aeb827e99fc9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92a0a723dc1f1ed28f879ad127a79e62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQuery
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

user32

GetWindowTextLengthW

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ