69d105a56cc43f42dd32ef288a51d906_JaffaCakes118 | Triage

Sharing

General

Target

69d105a56cc43f42dd32ef288a51d906_JaffaCakes118
Size

89KB
MD5

69d105a56cc43f42dd32ef288a51d906
SHA1

61edc58ff77032c792b910482dda3f3fe02f9c8a
SHA256

81d7469d6bbc3c7819d55c7872707c5382521b1f4b4f81188346c1515c086ec6
SHA512

69057db82554d1538cb544ffefb28df664b9aa8f7da309aa55608155f1ad0b534fa580bc03d49ab66180f66d83a9000e84f66bbe4e38c802f243a77d338622ae
SSDEEP

1536:bWn8seacXPynyT1ggO1aKQRZh9CxZ30E3UkZFOM99kT3WdPt:CnMa06yBs1oRZhs735FOw9kb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d105a56cc43f42dd32ef288a51d906_JaffaCakes118

Files

69d105a56cc43f42dd32ef288a51d906_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5444b32f4b8492425b8f50c9182933e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE