362beb1fba94cb239a91938d333abfb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

362beb1fba94cb239a91938d333abfb8_JaffaCakes118
Size

55KB
MD5

362beb1fba94cb239a91938d333abfb8
SHA1

8d20471ffdce60e0307b054bf4e9ef4196f81ed9
SHA256

fe7f489e6da3895cc548df1d8369662efb0145420874aa7d1764019c939d2b75
SHA512

207dc75c3d923af06dd13f8e54a90915e1620eec29dabd8882ab1ed8c21088580ceb0e30c2a84cd40cf2f2769e0f256b2e9206a7aafe3b1568ebb20e4871fde7
SSDEEP

768:8Sz0AGrUpgI6NAt8EM3Bs39GHZq/mUVlIisTvuf3IcrcZhRG558ad9EKb80Gr/XT:8SwDI688hqYq/mUVlFd/Id8vd9ELXDD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
362beb1fba94cb239a91938d333abfb8_JaffaCakes118

Files

362beb1fba94cb239a91938d333abfb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca8eb00f13bb0c93a363ab73eb0c526a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

FindWindowExA
MoveWindow

gdi32

DeleteDC
GetCharABCWidthsFloatW
GdiConvertBitmap
DrawEscape
GetTextExtentExPointI
GetTextExtentPoint32W
CreateFontIndirectW
GetStockObject
GetEnhMetaFileBits
CreateEnhMetaFileA
GetBkMode
CreatePolygonRgn
GetKerningPairsA
SetPolyFillMode
SetICMProfileA
SetLayoutWidth
CheckColorsInGamut

Sections

.text
Size: 5KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE