a6432599a2f61c6332eea265543717f6_JaffaCakes118 | Triage

Sharing

General

Target

a6432599a2f61c6332eea265543717f6_JaffaCakes118
Size

94KB
MD5

a6432599a2f61c6332eea265543717f6
SHA1

30d2e84caad21930ba3b9b6fc8969b4080825802
SHA256

0e8dad48ff25358afd95ec2cca1677fd5e7e702c73a5174d1d37edd2cd2029f8
SHA512

d7b445e2e87fc6c83c879d9659f522a78f71e399b996d5ad5310b8b73d44dca90af25c8b7e28cefd36ca29d37c8aef9412f22645a137a79d51328cc1b11c6967
SSDEEP

1536:+/pPqbT/37rfgB/sE2fqrXA/M5in8AYwEqh9cfqlevJ4JWuNAHNowLah9/YPmNhK:YpPqP/37rfgZsE2SjA/MQn3h4qA2jNOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6432599a2f61c6332eea265543717f6_JaffaCakes118

Files

a6432599a2f61c6332eea265543717f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

06f8b0204b1b95ae011e9feb66da8d8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
VirtualProtect
InitAtomTable
IsBadCodePtr
IsValidLocale
ReadFile
SetConsoleCP
GetModuleHandleW

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

Sections

.text
Size: 81KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE