85113befe8c68209214a37885bce507f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85113befe8c68209214a37885bce507f_JaffaCakes118
Size

76KB
MD5

85113befe8c68209214a37885bce507f
SHA1

74bca161d78e7e08cb8bef7fbbe493ff9a66a60e
SHA256

de1fbf14cf80721126a18ffc08719afbaada3cea050a093db64f82bb8d29633f
SHA512

73ceeb31254b9ea681b07ce8e35cf5f97f8e77de9c0bc01b51f8e5e62bf60b35d3389e4b5290586a518396bee3120aed01eb541af4cd12ef789b431409b1c21f
SSDEEP

1536:Xj17bp3M+YtQJeDYkV2GYwoLunNf0AzOdaNL/GzYjp9UpUmVQ:z5tXJDGBoLuNqdaNL/V9UprO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85113befe8c68209214a37885bce507f_JaffaCakes118

Files

85113befe8c68209214a37885bce507f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

569e3847e36d04c0afc4546e58848d7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
OpenEventA

user32

CharUpperBuffW
CharUpperBuffW
CallMsgFilterW
TranslateAcceleratorA

gdi32

LineDDA
CreateFontA
GetEnhMetaFileA
GetICMProfileA

Sections

.tls
Size: 66KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 826B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ