1b8fee84888cf583abd04c533d3caf60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b8fee84888cf583abd04c533d3caf60_JaffaCakes118
Size

41KB
MD5

1b8fee84888cf583abd04c533d3caf60
SHA1

25a4febda106dcc82a669e046f676c08ccb16ffd
SHA256

607cacd8f20190427900ce9b331d5832f2522ec39bd3900c5a7c788fb997c05a
SHA512

66c9696caffa8f14a653b1dbbe1bc7f1226730398405d7e373889084d8bd8e6537657f1d26c6b406027f72ef8c3d013d9b88179e1492e5b891b06fcb4ec01a9f
SSDEEP

768:AocaB7SFbWLqKFoytKWwUJBfrRmwbyraaIIsCIyu71+:iWabOoytvwU31mwbyfI/y6I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8fee84888cf583abd04c533d3caf60_JaffaCakes118

Files

1b8fee84888cf583abd04c533d3caf60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7117932e13f139fdfc10fca459407204

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

Sections

.text
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE