20d4453c41b56a75d15f124ca60052db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20d4453c41b56a75d15f124ca60052db_JaffaCakes118
Size

397KB
MD5

20d4453c41b56a75d15f124ca60052db
SHA1

829e12929864968f82e5e928dfc5f3d84090c488
SHA256

d33417be6662cdf36075c5e39f1d2f0f713f7cdde810ceaaefb415053ca017da
SHA512

7c94c4ab4cf70d20f3913fc7955a9574d2e5c466914d79ed497736c3b57414e6e0944bba505bbd8b00f387f80c8fe3dcc7e5116a9a6cf246de15a64476308f37
SSDEEP

6144:vTKB/1MTeV/DMako9GgjyWNsXmy+0ncnjdR4p:ofV/D1sgjyWqduj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d4453c41b56a75d15f124ca60052db_JaffaCakes118

Files

20d4453c41b56a75d15f124ca60052db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9e0703a1e4b3c222bf5314308c0b52e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ