46e8ac5c8cd40afe3340fdd2eb455d8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46e8ac5c8cd40afe3340fdd2eb455d8a_JaffaCakes118
Size

72KB
MD5

46e8ac5c8cd40afe3340fdd2eb455d8a
SHA1

9093d35876290f416c346f761f99bb0c04aa6050
SHA256

2d537445bfa9ca3956e7db3f31d2dc7a6c0cd53dfacb1348d152cb9890ea091c
SHA512

b62cc65c3c508505ca536094492e0b517b61a950c53dba814cf6908035b2d4021960fcbf9f3233b1d05905ae41ea7dce0ab0abc9575cd88c35aa77054b2c930c
SSDEEP

1536:zIyxfiTk+jRXU8RpByi9EiFKNHvxqgx/6SgO9:zlxfiTkoBykFg7ySv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46e8ac5c8cd40afe3340fdd2eb455d8a_JaffaCakes118

Files

46e8ac5c8cd40afe3340fdd2eb455d8a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0a77c9e596d457f49772d6106baf6102

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CheckColorsInGamut
CloseEnhMetaFile
GetObjectA

kernel32

EnumUILanguagesA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE