3f3440ea64eee1ddbe1a1a6b063105b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f3440ea64eee1ddbe1a1a6b063105b9_JaffaCakes118
Size

49KB
MD5

3f3440ea64eee1ddbe1a1a6b063105b9
SHA1

ff8a900d53a326f4cf8857c25e10a3f3fb9b7b4d
SHA256

c9f7c7b1c6d8aa5faa9a8da511a4526f0db310bb8d7add953a8f2d75010be951
SHA512

1900ac105cf555c38c9503f3708e0c46a21b9964969011f58285f689b976e3beec2b8e570acbac61d402c3b2990a6c24720c4493163b2c5f8bc9806bb486987b
SSDEEP

768:1cNCkwD6+8XJukNXruzHrkSx+lO3oLl8JZFCCCCCCCBmCkjJJi:KfQsXA/zYSUlO3eszjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f3440ea64eee1ddbe1a1a6b063105b9_JaffaCakes118

Files

3f3440ea64eee1ddbe1a1a6b063105b9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a9067a98dfbf4faee06c78db9fa222a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitThread
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtectEx

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ