5d85a9c700d8e62c1e790463f180ddec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d85a9c700d8e62c1e790463f180ddec_JaffaCakes118
Size

14KB
MD5

5d85a9c700d8e62c1e790463f180ddec
SHA1

f1934183752cc7b80e64d5a5a3fdceda1218acf9
SHA256

f2297bc473a4dcd2aab7103008c84b34316671a23da65f1a7962f41945b3409b
SHA512

e9eb22e27bb78d9b3c945e70532ba453a1a8b76665f8340c0d76adcb0b51cf31bd1f2d5e052f5604cb06b27cab5e63268e6b995eb087b19d178d78f3a53a484b
SSDEEP

192:dNpSoUsoonUG6i9QQp7+kLAPkG5zYLCql/t0Y00rLxN/X0jfwO:jpabobLnFbhG5ECql/t7LxpkjfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d85a9c700d8e62c1e790463f180ddec_JaffaCakes118

Files

5d85a9c700d8e62c1e790463f180ddec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

039616374fd27419cb9f2b929ffe35ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumPropsExW
CallMsgFilterW
DestroyIcon
DdeKeepStringHandle

kernel32

GetConsoleAliasA
VirtualProtect
GetLastError
VerLanguageNameA
Heap32ListNext
RemoveDirectoryA
TransmitCommChar
HeapValidate

gdi32

EngGetPrinterDataFileName
GetTextExtentPointI
GdiSetPixelFormat

comdlg32

PrintDlgW
ChooseColorA
ChooseFontA
LoadAlterBitmap

Sections

.text
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE