63d38b30b8d8645e6ceb76756feb7a00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63d38b30b8d8645e6ceb76756feb7a00_JaffaCakes118
Size

178KB
MD5

63d38b30b8d8645e6ceb76756feb7a00
SHA1

b09deabc8fd25fe04a581abed9744926ec951dda
SHA256

4a7735125712d87fe7399b46fc29eeaa6bbcb50882a1cddf5f71299cbe6c39d8
SHA512

fabacd9a0c917684c526250a758f7e108b25a14a48e9761247b5c6ac5d07b97514d5a638e544e3d7021abef5cb400bef726af05228b3b3639d39aaf6271835bd
SSDEEP

3072:+Kqc2y3XEA7QUPkND9U/tOB6vXBrbGW3o3saMIOhswGgXhEva/S46+Afa:QcBHE9N9UOexV3ocQ5wGH4Rc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63d38b30b8d8645e6ceb76756feb7a00_JaffaCakes118

Files

63d38b30b8d8645e6ceb76756feb7a00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ac54ec9a289a166c2467e144c642077a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Hello\Insert\Data\File.exe

Imports

gdi32

SetWindowOrgEx
SetBitmapBits
CreateFontIndirectA
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
SetAbortProc
DeleteObject
CreateDiscardableBitmap
SetViewportExtEx
EndPage

kernel32

GetSystemDirectoryA
SetHandleCount
GetPriorityClass
AddAtomA
GetSystemWindowsDirectoryW
GetBinaryTypeW
LeaveCriticalSection
GetShortPathNameA
FindClose
CreateFileA
CreateThread
ClearCommBreak
SystemTimeToFileTime
GetExitCodeThread

Exports

Exports

_SetMessageExtraInfoSetMessageExtraInfo@0
_SetMessageExtraInfoSetMessageExtraInfoSetMessageExtraInfo@0

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ