3e1113a7a0ab69276dea575afede9d42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1113a7a0ab69276dea575afede9d42_JaffaCakes118
Size

14KB
MD5

3e1113a7a0ab69276dea575afede9d42
SHA1

03df545bb6bc6500e0e24090425bd3f5319b349b
SHA256

a15ae67594c9355d81b3f734d7763928aac97b4bef2f5134d2455fc8ef6fa9c0
SHA512

dfe788a7994b9db197c1732b60132da79847f045d0a3df87a58fb1b73051aee6ba58d4af125b9459e918eef0b7696109d14c23461601f002970140bd7465326b
SSDEEP

192:oE/JcNyhz5Bg3hyOPYnP/SVy7aLV25I45ejJp0s:BJSFu/ta05ejf0s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1113a7a0ab69276dea575afede9d42_JaffaCakes118

Files

3e1113a7a0ab69276dea575afede9d42_JaffaCakes118
.exe windows:1 windows x86 arch:x86

75db03486215a71b9a00b75a92a0e3a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
ExitProcess

gdi32

ChoosePixelFormat
CloseFigure
ColorCorrectPalette

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE