81f3e4afc5bf7d8cd12f36697b30da3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81f3e4afc5bf7d8cd12f36697b30da3f_JaffaCakes118
Size

32KB
MD5

81f3e4afc5bf7d8cd12f36697b30da3f
SHA1

ef59be32e2233fdd009472d47bd1ddfffc754cbf
SHA256

9bf76d7d8f60217a36f846a6c0517293d1f0824d7d6fbab768f87dea625289a5
SHA512

2e0268dfa4f7107ab091868f170539aab5ccbb4673189325d82281979ba35564c7ac83b901a93c744be3c17a4e5ffb031f31b30eb835291305bdc3b588ab6ac1
SSDEEP

768:j6oOuW9iYtdWCL+PMBKRbXcjnLuoVm7GGgFR9u:ukW9iydWCL0JMnI7GGg1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81f3e4afc5bf7d8cd12f36697b30da3f_JaffaCakes118

Files

81f3e4afc5bf7d8cd12f36697b30da3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ca52362fdd4e95f0186cbc6cf26ce2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClipCursor
IsRectEmpty
RemovePropA
TabbedTextOutA
PtInRect
CharNextExA

kernel32

GetLastError
VirtualProtect
lstrcpynA
GetUserGeoID
CopyFileW
CreateDirectoryW
WriteProfileStringA

gdi32

SetROP2
CreateBitmapIndirect
GdiEntry2
EudcUnloadLinkW
GdiEndPageEMF

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE