8473e9d9bc6b793a365f45a8ee537c2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8473e9d9bc6b793a365f45a8ee537c2b_JaffaCakes118
Size

16KB
MD5

8473e9d9bc6b793a365f45a8ee537c2b
SHA1

0efc1a3f46b0292779e685e2c01a82ae99a89468
SHA256

f5a91fa2dabdb1beb66685cef4593d3357108e8e3ae4f6eac01a618643f643cf
SHA512

29350c6902fd8bd392ef463e63fab97afb7338acbe7612edbd395164bc0feea1e814eb30fbc396dd6a6818ad4ab53e2c3364daf10c8e34c0ec41cc76fe26e669
SSDEEP

192:9ONLFTjb2kWk5g5FlbfD4JJTRyzE6w9JRKJLfv86q4DK0VTFnFxGltN:eLFTX22KJUJJTr3eRE6BDKIBml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8473e9d9bc6b793a365f45a8ee537c2b_JaffaCakes118

Files

8473e9d9bc6b793a365f45a8ee537c2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b01a7b50c8ff30a2ee4c1e79e2ec9995

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xds
Size: 484B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ