199cb8e6eb2bb90fda99332c069e74c0_JaffaCakes118 | Triage

Sharing

General

Target

199cb8e6eb2bb90fda99332c069e74c0_JaffaCakes118
Size

65KB
MD5

199cb8e6eb2bb90fda99332c069e74c0
SHA1

41f0fb1a077f13c1b23a507d1017ed852ed26a12
SHA256

c607ef21fc83a313f2700a295e09ec256160671505f91aaaa301a81498428b17
SHA512

58b33dd67f7257fcc04a4966d6546ca12e94bc1c957bc9b81e73b71a6ffefca0482eaa31c25056b6c04becbd12c891a9210bc6fd5af5983050053eb9571c5488
SSDEEP

1536:Qte3KCHs91pmU+q4n++RCMDW4XPxGUl9O:Qt2PMOU+8SXJGUl9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199cb8e6eb2bb90fda99332c069e74c0_JaffaCakes118

Files

199cb8e6eb2bb90fda99332c069e74c0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ec66b909118ec6ac5c5e8326add32e3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

AbortDoc
CheckColorsInGamut

kernel32

EnumUILanguagesA
GetProcAddress
LoadLibraryA
WriteFile

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE