693ae9efe4d4f560a66218518f9379dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

693ae9efe4d4f560a66218518f9379dc_JaffaCakes118
Size

23KB
MD5

693ae9efe4d4f560a66218518f9379dc
SHA1

25d22902d70c3c1428334781100bef05231f85d9
SHA256

4c35b6032e1926cf210fdb023fdb1c380fa482ce592f0674b97c29ffc4398b40
SHA512

5f23cc9988f0e47b75696f44809c50073d978de71c677caa8b97b98cbe2e754e23f57ad8f2a592047cab43dbdb50e4853d50bf94e12c7079f32ba44c9c715bb2
SSDEEP

384:PbAeni5UKTBeV+kappKb842rOpeJIIkpzuj4PviSRyTNEzNMi+dD/c9E4eQgBwe:P1i5UKTBeV+ngo42ape2uUPviC4Ez+iQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
693ae9efe4d4f560a66218518f9379dc_JaffaCakes118

Files

693ae9efe4d4f560a66218518f9379dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9c540a38343c9ddc5e61d570723fb58a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
HeapAlloc
GetModuleHandleA

user32

ShowWindowAsync

gdi32

SetDCBrushColor

comdlg32

ChooseColorA
ChooseFontA

ole32

CoInitialize

msvcrt

_except_handler3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ