6154841e7a780eb7c50b7944fb8cb445_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6154841e7a780eb7c50b7944fb8cb445_JaffaCakes118
Size

57KB
MD5

6154841e7a780eb7c50b7944fb8cb445
SHA1

6cbd25ef1adbe08a0e8715ca10bc18f0f40d7232
SHA256

25f96289b89eea4808cc13bd58fbbfc8df99b813c30797096d2db5ec75387615
SHA512

940a612a0d946e8f85ad747bd87c5ce9b4612352a09fc75fcd670020eb3f17ee7ec90a3508662c0fd3e3c664956de6b88db9909764eb5e491d7e810cba4c2b1d
SSDEEP

1536:KlBM0//UZxO8LYemoo3NUFJk8oWIbnniBeslHfgqm:SkZWFaA9Wsspfgqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6154841e7a780eb7c50b7944fb8cb445_JaffaCakes118

Files

6154841e7a780eb7c50b7944fb8cb445_JaffaCakes118
.exe windows:1 windows x86 arch:x86

73cc665a25d97b745dd7e13bb43e4373

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetArcDirection
GetBrushOrgEx
GetCharWidthI

Sections

.text
Size: 26KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 437KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE