4b56ac285ff0de6528f08689712aac6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b56ac285ff0de6528f08689712aac6e_JaffaCakes118
Size

97KB
MD5

4b56ac285ff0de6528f08689712aac6e
SHA1

cf1ac46d73eee8c6b9575250c567418d62d3e9b9
SHA256

39894c64c89f7c4ba74ec9ba19eee394f9aa0c3a73fab16141beb53af75367bf
SHA512

9e4999a00757f4c0541d83c8626f2039a8ab6f4f4b7ea0ded4da72f93ef166044f0ade030a90740f8ea6b1382433d515759073d845c8dd8d95e56cff56dab93c
SSDEEP

3072:MRt1a9KNnRD1bJJ73KDCgJYkQrTcmNJEEls:it1LdDQDlQ3cmNV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b56ac285ff0de6528f08689712aac6e_JaffaCakes118

Files

4b56ac285ff0de6528f08689712aac6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d274e9db58b6b81122487fe63f43cede

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
GetDC
GetDesktopWindow

gdi32

CreateFontIndirectA
GetObjectA
DeleteObject
MoveToEx

glu32

gluNurbsCallback

kernel32

GetUserDefaultLangID
VirtualAlloc
GetConsoleOutputCP
VirtualFree

Sections

.text
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ujvhkkdk
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Pectjupu
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ