b7559535c7c223ee64a1737f025fcd97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7559535c7c223ee64a1737f025fcd97_JaffaCakes118
Size

430KB
MD5

b7559535c7c223ee64a1737f025fcd97
SHA1

8c0b67dab8f042dd3bb5622494e9d5c69e44698b
SHA256

244f521a8ff12fdf0513aeeb4e47294ba3a1046fe1967d0b3b431710857eb505
SHA512

da5758d731ce11d077d97ef09689e2ad6ca9470393da0d329081e7c8d928f214802ccfc8f38dd10fa897933162e1d64b3b617c7a536bafe58de07da2de82c0a3
SSDEEP

12288:Mf3KiaHCP29qTN3jcWREFhqLPciyFwxztArnS:s6zXUtjkFgnnxztCnS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7559535c7c223ee64a1737f025fcd97_JaffaCakes118

Files

b7559535c7c223ee64a1737f025fcd97_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92a0a723dc1f1ed28f879ad127a79e62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQuery
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

user32

GetWindowTextLengthW

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ