779d70d9d19d826e9762cf8805f4d6b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

779d70d9d19d826e9762cf8805f4d6b8_JaffaCakes118
Size

431KB
MD5

779d70d9d19d826e9762cf8805f4d6b8
SHA1

168563c7bb017c152a49054343a55592e753b498
SHA256

bbc2a677d5e8eb84ff6036c4d64cf224f3f25626b0e89d303d61dfca19c33a93
SHA512

86a4c7242e169559c47390dcd593151b13f16cfa2424e83214617eb36b4250f31be729b6f7cf5351e056494a01f4b5f4d329dfd0fb16a879e14cf1a9d20b0829
SSDEEP

6144:y6rHqJiignmjwnlkNLcWRTrKGV9UvgY68ytYdRPBGuDxcMh3STAuhjx3:y6rGiiLnIaKYHY68ysRZGhMh3S8K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
779d70d9d19d826e9762cf8805f4d6b8_JaffaCakes118

Files

779d70d9d19d826e9762cf8805f4d6b8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92a0a723dc1f1ed28f879ad127a79e62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQuery
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

user32

GetWindowTextLengthW

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ