95795b954435ef9ef48b07a5f580a793_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95795b954435ef9ef48b07a5f580a793_JaffaCakes118
Size

16KB
MD5

95795b954435ef9ef48b07a5f580a793
SHA1

58a5daa99d4ff9de42486af3c18d35fff18e4169
SHA256

87b152d17e95ccc66203387fd20041497be7115a7c0ca9aa69fda5e106cef8b0
SHA512

b4cd59113d41f419f41b503075041bb44d4ce390ec5f24115e0d89e5ea65dd1b28a8b0b52041ddfc77d678d313f570654c9b092d4df58806ba2aaa9e2cf20588
SSDEEP

192:zmNZUFR46Z6+YD7JbpW5SUWwVEZN7bG2e8z:zbRZ6lH0S7bG2e8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95795b954435ef9ef48b07a5f580a793_JaffaCakes118

Files

95795b954435ef9ef48b07a5f580a793_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fae0df5e55fc65ed1991c0f852b44168

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetVersionExA
lstrcatA
CloseHandle
LocalFree
FreeLibrary
LocalAlloc
GlobalAlloc

gdi32

SelectObject
MoveToEx
GetStockObject
CreateCompatibleDC
DeleteObject
SetPixel
LineTo
CreateSolidBrush
GetPixel
GetBkColor
ExtTextOutA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrs
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ