3f4f7a81dea347bcfe2361e6b5bcbf6b_JaffaCakes118 | Triage

Sharing

General

Target

3f4f7a81dea347bcfe2361e6b5bcbf6b_JaffaCakes118
Size

74KB
MD5

3f4f7a81dea347bcfe2361e6b5bcbf6b
SHA1

c4e5163e1792bfbc7d7ac3ffe033374da08f14a8
SHA256

693f2e5018b9bd54dd94afee75c2cbcb2016a2889cf734614a953194deecffd2
SHA512

af081f22cde60ff057b0faab2d98d2ac6e1e1924afa51dd5e1477fff7999ccf2ca90bf48c688f29d326336597d3e7523a57712e6dcac48c0500cc714d4db6571
SSDEEP

1536:AaT1QatS/zt3dvCHVyd9nnbyDJ9GFuM+QkZaBF4LIze:pTaatT1yXbyDJzQIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4f7a81dea347bcfe2361e6b5bcbf6b_JaffaCakes118

Files

3f4f7a81dea347bcfe2361e6b5bcbf6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 37KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE