8a2f4f4fe928ffb44b8a97ca87ed8c5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a2f4f4fe928ffb44b8a97ca87ed8c5e_JaffaCakes118
Size

74KB
MD5

8a2f4f4fe928ffb44b8a97ca87ed8c5e
SHA1

ce3afdb720f8094db021e71b1981293224c0b440
SHA256

0111976b4410732ecf2176ed3512346e9af7ca2bb3dc58159de0daa0cd394bd2
SHA512

f7d86e0059d72a02edb779ea97767a61851d1e6524fc319461d8a266d7425a31e6b4696221a973c9f92c19a88316db32de46415d084c749f32fa6da652e979fb
SSDEEP

1536:NR9nLB1mYBRj105sGtaJVyJ7Ub0Q44csUVKOg8S:NHnL7BRCzEyJ789xUyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a2f4f4fe928ffb44b8a97ca87ed8c5e_JaffaCakes118

Files

8a2f4f4fe928ffb44b8a97ca87ed8c5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE