755197ca3c904b3d08cabc17ecf5769e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

755197ca3c904b3d08cabc17ecf5769e_JaffaCakes118
Size

23KB
MD5

755197ca3c904b3d08cabc17ecf5769e
SHA1

2f8159abe6c53f7d69bc9d757d2b7febfccd4eec
SHA256

8da76d4a7c38851a284e5d1fe899a740e4f4b0fee557e7c7cf7da782024e5048
SHA512

9e6476a63c7ecd994a4802671ee65d8e7fca11c9b00c5e2049353936addd01dbd86b7592fd0b6d7e2e4c271ace1cb5777e11b1032c94686e47a22cf63ed94674
SSDEEP

384:WbeNmwZ6GBrOkJ3oC7dgnZo7V1AaAZaPlcYAmX+2maJi3:pmwZ6GBSkBd6oWa67YQpaJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
755197ca3c904b3d08cabc17ecf5769e_JaffaCakes118

Files

755197ca3c904b3d08cabc17ecf5769e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8323c439e51538987046dddc26267a12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapCreate
HeapAlloc
GetModuleHandleA

gdi32

SetDCBrushColor

comdlg32

ChooseColorA
ChooseFontA

msvcrt

_except_handler3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ