a21bea7c01a8f7b8eb1a9d1818caecce_JaffaCakes118 | Triage

Sharing

General

Target

a21bea7c01a8f7b8eb1a9d1818caecce_JaffaCakes118
Size

17KB
MD5

a21bea7c01a8f7b8eb1a9d1818caecce
SHA1

68293d2ed02c5fcfe677500f5f21b82e3ad3f8c8
SHA256

e9bd24b39b746e33d403202fb882891bd28236f4e87a7123278bd783a5e1e0ff
SHA512

79fd079debec08540f5af5ab8fba00514184a7ea76cb58f1e189bd0f638f85a63a4bd2685738d97512368bd8c3abce8d8ed88436afd77e8ae14b3be2206478e2
SSDEEP

384:CowLdAUsM6scsa0nNCcVotuJ2rITCF3Ms8GIbTR8wI:CvZnNCQotuJ2rJF3Mxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a21bea7c01a8f7b8eb1a9d1818caecce_JaffaCakes118

Files

a21bea7c01a8f7b8eb1a9d1818caecce_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6c33eae0176337541b4fc1ad9e438e95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

LoadAlterBitmap
PageSetupDlgW
dwOKSubclass
ChooseFontA

kernel32

ConvertDefaultLocale
ExitProcess
CreateThread
GetCPInfoExW

Sections

.text
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE