4e0053fe00b65627c07dc8c85c85a351_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e0053fe00b65627c07dc8c85c85a351_JaffaCakes118
Size

82KB
MD5

4e0053fe00b65627c07dc8c85c85a351
SHA1

b7cdd457fa6bed6864957c9bf9ed0a5172729b5e
SHA256

123e66b9a3729f2f129d3ab376c1509b75080d5eda5805938d0f276e80d4bba9
SHA512

4d5828280a52c2dfbc223131a658fe17ca9cfe2a9c85c73d9ae10b7e6d8504af1ac76f6460813c0413ffd7d5aa8212d89850a8670e4a96dad6b7d3079765897b
SSDEEP

1536:2JvN9MuE14d6vXB7xo7vK10fG43li/dJYN2y1wN0wv1GqodTx3NHSDwyJl:6MM4txoFfhs/d+v1wN0wFKTx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0053fe00b65627c07dc8c85c85a351_JaffaCakes118

Files

4e0053fe00b65627c07dc8c85c85a351_JaffaCakes118
.exe windows:5 windows x86 arch:x86

68c5f6bd252a8e8daeb703744bdb3352

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetFontData

user32

IsCharUpperA
GetDC
IsCharLowerA

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ