23a24f3962f8344ea28162e0d514afdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23a24f3962f8344ea28162e0d514afdf_JaffaCakes118
Size

51KB
MD5

23a24f3962f8344ea28162e0d514afdf
SHA1

d77bfe7825498b7ec9e18e7eab21e75a56b269cb
SHA256

0bff3e01abf350294a732729e10a8acf5be39a8d330b6b7795958a197b9d0302
SHA512

7e125e3bb9cf5dfe3731e14c6f0503a8f52c3c47d3d80779f5c5355b799dd187fa27f4657b3e29ec4a9f5a7a37330468209c3bd793805d8b11affc738606bfde
SSDEEP

1536:aYQKgxX+7zKdB/fv+VdoxQWF1EivIA6gxLvI:IfO7KB/fvou6WzEivH6gC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23a24f3962f8344ea28162e0d514afdf_JaffaCakes118

Files

23a24f3962f8344ea28162e0d514afdf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

13573d4a04de264e6201402e52e3e888

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentDirectoryA
GetModuleFileNameA
Sleep

gdi32

CreateICA
CreateScalableFontResourceA
EnumFontFamiliesExA
EnumICMProfilesA
GetCharABCWidthsFloatA

Exports

Exports

Eeytfyd
Eygteyd
Hgrygt
Sgqfhy

Sections

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ