b7e539439c351c82bae513dd43a0faa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7e539439c351c82bae513dd43a0faa8_JaffaCakes118
Size

45KB
MD5

b7e539439c351c82bae513dd43a0faa8
SHA1

e0cf2a5cf656e2bc64b4ee7a943be7040892b95d
SHA256

b7b1b7defa0f0d4c685444190d7d0d6f9ab1f0716eeaa63ad0141b2b0b2da756
SHA512

6182e31a677011d44428ca42f23787e76ba9c8796835c00d80035952935375cded5e2ebcee5b2bea0356f5876e8c0a0e268fa1a489d7965df208bab10efd5f21
SSDEEP

768:bhMLJAjZIoNELPUjpIDqMl/yLmCRHsJCBjMpJ6CSg23eaLj7MZCaNXn4EV:bhmJQNycNzMl/yiA3IpJI3dX7MZ9NX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7e539439c351c82bae513dd43a0faa8_JaffaCakes118

Files

b7e539439c351c82bae513dd43a0faa8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3e1e694b5c70eb3a9dfad45817de2038

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetTimeFormatA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalFindAtomA
GlobalGetAtomNameA
LoadLibraryA
MoveFileA
UnmapViewOfFile
VirtualAlloc
VirtualFree

user32

GetPropA
GetWindowLongA
GetWindowModuleFileNameA
GrayStringA
IMPQueryIMEA

gdi32

GetMetaFileA
GetOutlineTextMetricsA
GetTextExtentPointA

Sections

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ