1be571d5b6e075db8a105b78713bc6d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1be571d5b6e075db8a105b78713bc6d1_JaffaCakes118
Size

152KB
MD5

1be571d5b6e075db8a105b78713bc6d1
SHA1

203a5476b9da0a0c44d64aa06b77772c90928768
SHA256

0fda7847c9fa42e4209a95ab0c4d8a074a321b474d13e49c64cef7c297720ebc
SHA512

86eb6b35916d5d9e4c373c921527d1bf1e64925e0b5eb711b8e0335f1eb9678efe447bffccd0e30ceee83c6fa7c36738a17858a9d194ef97653c78710132a535
SSDEEP

1536:uNZVSxKjYAhXAFkrsxRh+FnysUhyI38CPpEF+4:uroxSi/Y8nrEw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1be571d5b6e075db8a105b78713bc6d1_JaffaCakes118

Files

1be571d5b6e075db8a105b78713bc6d1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

49f6b1e8a608e226b494419bb673db92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAlloc
VirtualFree
EnumUILanguagesA
GetProcAddress
ExitProcess

gdi32

AbortPath
ChoosePixelFormat
CloseEnhMetaFile

Sections

.rsrc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE