96656863e96de564d1ce4504de74cd6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96656863e96de564d1ce4504de74cd6e_JaffaCakes118
Size

58KB
MD5

96656863e96de564d1ce4504de74cd6e
SHA1

b6fbd04a63d809038ef044f281932274bdc45c36
SHA256

aa6462fb73c69d7d223b230f342b68a483e0ed2d6367fe81a52e16aedb5c2240
SHA512

3afa4f54db26044d752c257a00919f250e836160029f5e4da7865ff41f10edb574d0a5c105c6e0944dbd18e8412023c302a71d087976ab67ea7b7653c6ff97f7
SSDEEP

1536:OLOpqEp1lTR/z9dF7sabx9q0wycdcCVdYzv:ONE1TRpsabx9q0wyRCDYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96656863e96de564d1ce4504de74cd6e_JaffaCakes118

Files

96656863e96de564d1ce4504de74cd6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4a6265375b722d2d504c2ce960e9775

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetViewportOrgEx
GetObjectW
MoveToEx
Pie

kernel32

GlobalSize
GlobalAddAtomW
LocalAlloc
GlobalCompact
LocalFree
GetVersion

msvcrt

_gcvt
_heapchk
_inpd
_mbslen
_ismbcl1
_scalb
_mbsnextc

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE