0f959d95a83e04b23a4d16f1c34a39c2_JaffaCakes118 | Triage

Sharing

General

Target

0f959d95a83e04b23a4d16f1c34a39c2_JaffaCakes118
Size

32KB
MD5

0f959d95a83e04b23a4d16f1c34a39c2
SHA1

e40d2998e02802a287db66ac93388cb2924740c2
SHA256

c7d31a80cc94b50ad341ffb29b711200438739812d77f13707de430a25585085
SHA512

f382c50cd88513d7c8f98cfe498c72418cb04b95407cc7d342d529f84a67d48f9bd11e7a67fb7ef0ac6b3893e3b1ded27d80f981d2cf72a2eb253e7d60b9030d
SSDEEP

768:nBiuRkQS+0pUl4gaOpipT2ByOqDrZGFzhj6qz7+FD/yspOxzNboRV4I:BiuRkzpUlEpisTHMfj6Qg+spMzNbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f959d95a83e04b23a4d16f1c34a39c2_JaffaCakes118

Files

0f959d95a83e04b23a4d16f1c34a39c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60ea1c88125f092471145876122a4a34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyCursor
GetMenuInfo
ScrollDC
OemToCharA
RegisterSystemThread
IsWindowEnabled
GetMessageA
WaitForInputIdle

kernel32

GetLastError
VirtualProtect
GlobalMemoryStatusEx
HeapFree
Process32FirstW
GetCommModemStatus
lstrcpynW
GetCommProperties
FormatMessageW

gdi32

Pie
GetETM
GdiQueryFonts
GdiConvertEnhMetaFile
DdEntry48
IsValidEnhMetaRecordOffExt
CreateEllipticRgn

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE