5b38cf7f0aa8b4d9cc9d2f8d9ace7b83_JaffaCakes118 | Triage

Sharing

General

Target

5b38cf7f0aa8b4d9cc9d2f8d9ace7b83_JaffaCakes118
Size

94KB
MD5

5b38cf7f0aa8b4d9cc9d2f8d9ace7b83
SHA1

f562c367c28335eaeaab57a09108c2a7d8184c4a
SHA256

2c03410f4d02c07f7966005ba15c2613c76b7478e886a4a3702f8bb7c27af3e4
SHA512

36cedb03555c62314bf00e50f673655b245d52d052cdba28869528d616c1e821f3627f9611ee60f77f835670521ad4f083059b4ef7aa56073d58b3f55ab5e300
SSDEEP

1536:1/pPqbT/37rfgB/sE2fqrXA/M5in8AYwEqh9cfqlevJ4JWuNAHMowLah9/YPmNh8:JpPqP/37rfgZsE2SjA/MQn3h4qA2jNOX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b38cf7f0aa8b4d9cc9d2f8d9ace7b83_JaffaCakes118

Files

5b38cf7f0aa8b4d9cc9d2f8d9ace7b83_JaffaCakes118
.exe windows:5 windows x86 arch:x86

06f8b0204b1b95ae011e9feb66da8d8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
VirtualProtect
InitAtomTable
IsBadCodePtr
IsValidLocale
ReadFile
SetConsoleCP
GetModuleHandleW

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

Sections

.text
Size: 81KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE