5a9a1a13203448afebaeb7f126dfd269_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9a1a13203448afebaeb7f126dfd269_JaffaCakes118
Size

183KB
MD5

5a9a1a13203448afebaeb7f126dfd269
SHA1

63fc4deffd158c4001e342c2dcb0d1cb5f8a9909
SHA256

839a6306d75209e7caac353eb0c3c42df582dc21c7fe4d3e47052d312137befd
SHA512

bcb2be36e5d28d968cd61718a12034debbebacd99095a1473a679ee07faf75976b31c5db7dcde6b7e86729c4345c1780061bf4cfbe9f4f7b840b338526fbdee8
SSDEEP

3072:imaiyhewsK/IkxHaa/W6yurJ5y1nRqCydO/UFzsR6Vsha1AsE020wbxJi5PyS1j:ryhec/IkgmyyJSqCq4UFzsUVsa1AuFoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9a1a13203448afebaeb7f126dfd269_JaffaCakes118

Files

5a9a1a13203448afebaeb7f126dfd269_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fbaea5b9034de5b9482913ff248ab4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateFileA
SetTimeZoneInformation
FreeConsole
VirtualLock
WriteConsoleInputA
GetSystemInfo
GetConsoleCharType
Heap32First
GetProfileIntW

user32

InsertMenuItemA

gdi32

EnumMetaFile
SetBkMode
Polygon
SetDIBits
GdiAddGlsBounds
CreateEnhMetaFileA
PolyPolygon
SetLayout
CreateFontW
GdiConvertFont
GdiGetCharDimensions
AbortDoc
CloseMetaFile
CreateRoundRectRgn

Sections

.text
Size: 9KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ