8810ac59dfea167f1fdc999e06b4d7e7_JaffaCakes118 | Triage

Sharing

General

Target

8810ac59dfea167f1fdc999e06b4d7e7_JaffaCakes118
Size

58KB
MD5

8810ac59dfea167f1fdc999e06b4d7e7
SHA1

122d19e0d53b0d3a546d01e163cf6fb571cd094e
SHA256

48d03a62ee882328fb5e0a4d9fe88c1a315c3d65774151e6c35c19c4b7baf222
SHA512

305d5aae6ee0ffe1bf13173d4d1d44d16906eae57f12610762b5cf150198d4b1c7e369e6426f580b34d8e65f32bd91d9d60effc48bd73b1d2994394e0d1737c8
SSDEEP

1536:bp3mb6WDz9K4TuXDBF96A7GLbZlVrLNuz7g5GT:bhmmS9nTO37GLlYz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8810ac59dfea167f1fdc999e06b4d7e7_JaffaCakes118

Files

8810ac59dfea167f1fdc999e06b4d7e7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

eb36bde3960e93df9ae9c4ea2639d86d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
ExitProcess

gdi32

AbortDoc
ChoosePixelFormat
GetObjectA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE