088dbf8120f815c010164949688295aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

088dbf8120f815c010164949688295aa_JaffaCakes118
Size

397KB
MD5

088dbf8120f815c010164949688295aa
SHA1

8adeacc44c76762c1c3e17cba7038538aaeffc4f
SHA256

2ec61031c5e4065de6fb0e0cc91a6847ade679fc7686b83cd6ff960d6008fb18
SHA512

93e9281eca0701566353b96f04251dc1520ef1d9d3acc9393909f15ec12c337658b0dbf44ce5eae4b7d91dedd1bb1731584499ef7538b735c75c42216d2df408
SSDEEP

6144:hBcRz/ppI1CRRaNfPXfm8GpIYE+9eF4s01Xttro0JRTl:YRbppjRRa9sCw9eFl019d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
088dbf8120f815c010164949688295aa_JaffaCakes118

Files

088dbf8120f815c010164949688295aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9e0703a1e4b3c222bf5314308c0b52e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ