77d9338e3cef3ff1847f50f6e2ec43cd_JaffaCakes118 | Triage

Sharing

General

Target

77d9338e3cef3ff1847f50f6e2ec43cd_JaffaCakes118
Size

62KB
MD5

77d9338e3cef3ff1847f50f6e2ec43cd
SHA1

4c0606ab744d8209fb40f449e7bddb7b7685ae18
SHA256

6badabaa762788ad0eaa191faeb11029e9dbc836b236fb37ba857cc3f608b712
SHA512

f0e01ce601165ecfc0caf3bb057db7dfa7fba860c6eff7e6afcfda1b63e441fa2275dfb4a356938d29b004fa87aac124825b92e6dcd0ad0f247455f69ae6f43a
SSDEEP

1536:1DFHzWMjkFwnFqs0su0zgJ88zUJx+0Wk8SWxvTRbg7uMyVBYIN50P1i:1DFHqMjBwd8IZwJ8dRxvGiL9N5I1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77d9338e3cef3ff1847f50f6e2ec43cd_JaffaCakes118

Files

77d9338e3cef3ff1847f50f6e2ec43cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE