3f8d39fda242ad73000d928c111de577_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f8d39fda242ad73000d928c111de577_JaffaCakes118
Size

148KB
MD5

3f8d39fda242ad73000d928c111de577
SHA1

083929c7b66bdf6195f3d32c1c6944c3e0cab241
SHA256

1d72ab8990ec659e1ee029c725ce3f97816663813b88578926547d8fb5ff08b5
SHA512

d047fb3b13ecccdb7a7f472386ade4bf2acde3a42b3da4f76668b2b093a226ba5a62caa6a7abbcf89799f272d8bcc3ef85a5bb5d3ea12cda71e82b573cd3cf08
SSDEEP

3072:DZFSr7tV7pMvIjeS5h1HbwCXTJV4KVAcA:DWtV1P5h1ki9R3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f8d39fda242ad73000d928c111de577_JaffaCakes118

Files

3f8d39fda242ad73000d928c111de577_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b081784cef9b58b6ba94d31fac8385e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
GetClipBox
CreateSolidBrush
SaveDC
DeleteObject
CreatePalette
SelectObject
RectVisible
LineTo
SetTextAlign

kernel32

GetStartupInfoA
GetLastError
VirtualAlloc
GetConsoleOutputCP
VirtualFree

user32

TranslateMessage
ShowWindow
GetDC

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 805B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Huoda Kj
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ