5ea0ed7e7836369e6a7d73f44891f33d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ea0ed7e7836369e6a7d73f44891f33d_JaffaCakes118
Size

66KB
MD5

5ea0ed7e7836369e6a7d73f44891f33d
SHA1

38abdfdd754f48d2471501e8095213e0803ddcd9
SHA256

84fb5cdec3fa3c2db301d832cc033da6363e4c5ad61644ed07277dda56a04e85
SHA512

e6f1fb67aa9df4e326cf7cfa457b786672d34578a908776f1371ca416d938b6f4a2c9f26b63ec50d564eda1727764926ebd7f203afe4ad2086f032a455cc494a
SSDEEP

1536:8Bi16hnGCLz9OgjXnMs5cJc5K1MZzz36:8BibC/9OgjMnc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea0ed7e7836369e6a7d73f44891f33d_JaffaCakes118

Files

5ea0ed7e7836369e6a7d73f44891f33d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f1a1d1c14781e48a251261f7576f0a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
GetKerningPairsA
GetArcDirection
GetFontData

user32

GetAltTabInfoA
GetDialogBaseUnits
GetMenuStringA
GetMenuItemID

kernel32

CommConfigDialogA
DefineDosDeviceA
EndUpdateResourceA
EnumSystemCodePagesA
EscapeCommFunction
ExitVDM

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE