b59ea8925b3e7d8f756de394b4e50ed2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59ea8925b3e7d8f756de394b4e50ed2_JaffaCakes118
Size

428KB
MD5

b59ea8925b3e7d8f756de394b4e50ed2
SHA1

60af27dc60ba407b668218a89c5e6036211be765
SHA256

4e2f13aa6ca072ca3f30dade42c22b65d169df4eafebc30a1c2c9ea1a97639b2
SHA512

967962f993dd33ceaccc525fcaacbfe5f3126da0be06d7c6b39d96cd2c0a5d4fdcbf4fa631e68d705818ef665998a4049f376f96da84effa3503dc1189cfb173
SSDEEP

6144:jdBHXsusIhQ7T/l496Zi5lUbxWy4xkjjLi9++MnLPNBg3YBavh9mpYYTIWSUEeN6:rHXsu98zm9l55kvA++MnLPTgbLR7eo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59ea8925b3e7d8f756de394b4e50ed2_JaffaCakes118

Files

b59ea8925b3e7d8f756de394b4e50ed2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92a0a723dc1f1ed28f879ad127a79e62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQuery
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

user32

GetWindowTextLengthW

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 175KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ