61fdd837dcd0408512f825cf4337777c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61fdd837dcd0408512f825cf4337777c_JaffaCakes118
Size

108KB
MD5

61fdd837dcd0408512f825cf4337777c
SHA1

a3d036d2878890fb58c4b77c540d399f9701d980
SHA256

a4aa75d33b5838143430a5a651678e4787eb603476fbb5648852da4d9050c285
SHA512

32839c1176838e0c75be25b4c544b16157c40fe63ec9f94868e778f979d13b8ea19efed944878769524151fb2de17acbda02e9fb6d5e9bcfee0a23d5c280e18d
SSDEEP

1536:0NRHLIZ4sJX8V9OwmNHh7dP2lyGJCwb7QKonoyPrSsAcwvwI0jbKZwoZaNSQ/PvT:0k4sJszSNB7WRJCwvQKlsAcmKuw1Hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61fdd837dcd0408512f825cf4337777c_JaffaCakes118

Files

61fdd837dcd0408512f825cf4337777c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5444b32f4b8492425b8f50c9182933e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

Sections

.text
Size: 62KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE