b3ae2ac2ad80455081c119ec338489d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3ae2ac2ad80455081c119ec338489d9_JaffaCakes118
Size

44KB
MD5

b3ae2ac2ad80455081c119ec338489d9
SHA1

e9384cea98b78fa5ef2de0673f79aef2fb6b28a7
SHA256

1555d23aea5de3fd4b747d0d4f4f5d16d46f049c5b67761cdfa00c8efb7abe8c
SHA512

ab4f3f802f0044033687e8604af5226ffab3c9b51841b68cda96b491a96ba75f00fdc9b8397c932dd4a6ed56ca3049c9533d97d087f465929e7b03bf047b57a1
SSDEEP

768:A78niAQG7EwmIzTIaeN7gLNz8YGxv9iRZCFXU5:GAL7XmiTIaehuNLGGOE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3ae2ac2ad80455081c119ec338489d9_JaffaCakes118

Files

b3ae2ac2ad80455081c119ec338489d9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

29bd3ba3bda40d12c805a60c6463dcdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixelFormat
GetTextFaceW

kernel32

GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

user32

GetMessageW

Sections

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ