64495070a72c6f399540b2582885164a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64495070a72c6f399540b2582885164a_JaffaCakes118
Size

32KB
MD5

64495070a72c6f399540b2582885164a
SHA1

5782ab8862806280575a1740d5c27c6d2b05c74e
SHA256

8be6b98ddbc17e26b67501c2cb3dd5031d5bf407d6a0c7253ef4e29fb76afa22
SHA512

3cb3b4b6adfec6c611dc491f166168457f8f06f4550358e80ceed59260fcdd2aab490f0ddfb97a8293a6e23600b671acdd7b4160b2a18d600b852eadb1d280fc
SSDEEP

768:yQIBaRXTJ+i/O6lJlIzkFn2bBABNPYsCHEshr7u:y9BaZ0h6RMi2LsCH57u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64495070a72c6f399540b2582885164a_JaffaCakes118

Files

64495070a72c6f399540b2582885164a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6dc2a7e73b3d43bcc83f38b8f7ac7937

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClipCursor
LoadCursorFromFileA
LoadImageW
UnlockWindowStation
GetWindowRgnBox
CopyRect

kernel32

GetLastError
VirtualProtect
FoldStringW
FreeUserPhysicalPages
GetFullPathNameW
LockResource
HeapExtend

gdi32

Escape
GetLogColorSpaceA
FONTOBJ_cGetGlyphs
GetDCOrgEx
CheckColorsInGamut

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE