6a883739ce27e8ee99a2cb631bc39dd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a883739ce27e8ee99a2cb631bc39dd3_JaffaCakes118
Size

30KB
MD5

6a883739ce27e8ee99a2cb631bc39dd3
SHA1

1ab966c95c8a21f27ecac8269bc75ac95f62c5a2
SHA256

082836e8badcb198bd821f7c4ed89caf6c63b084488272ee1f9887f6b014e64e
SHA512

efdfee73523a7f37191641b235201d2a3b0c7ebdcaa6ab4112da2d9203e08d10fb2f9f10bc91e9e7e81f8d3778342ac1ddf2a30a635dafd57c6c32868f08bc2a
SSDEEP

768:RQMYG8ma+stAejAKb7jE6N0KIZFKeOAJy+kG21yTJ6SfR:RQZRmDsjjAeEWmOArk9yTJlZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a883739ce27e8ee99a2cb631bc39dd3_JaffaCakes118

Files

6a883739ce27e8ee99a2cb631bc39dd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb1ba129a287a65aaab7333206f84617

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
RegisterServicesProcess
DrawFrame
SetPropA
MessageBoxW
EndTask

kernel32

GetLastError
VirtualProtect
GetPrivateProfileStructW
HeapUsage
DeleteTimerQueueEx
Process32First
EnumUILanguagesA

gdi32

GdiGetBatchLimit
GetLogColorSpaceW
GetBrushOrgEx
SetTextJustification
GetBitmapBits

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE