ba038a8451f4e8eb74dbf7b9984eb217_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba038a8451f4e8eb74dbf7b9984eb217_JaffaCakes118
Size

16KB
MD5

ba038a8451f4e8eb74dbf7b9984eb217
SHA1

ddd82321ed1f12d1378a739a2dcf55f93be9180f
SHA256

9094f5eb619f1064cc0fe19348b8557a7d2f370b790359c076b0481c8ed571a6
SHA512

7cdc20ca94fcd485c1102a5b274aeb8f04b438e166c9ba3bf8b9ea716de6966de1cf44364e9e360b3dbbaa970349e8a00bb61c57c881a2a3565a9464fcfb0322
SSDEEP

384:3lr7/YwRRVyWKjQnzgtbgv0zRXuR2CuO8TqYjv:3lRoAzo3zJuRAO8Fjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba038a8451f4e8eb74dbf7b9984eb217_JaffaCakes118

Files

ba038a8451f4e8eb74dbf7b9984eb217_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b4d89379540c23ee37ea66e9b0834554

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleInputExeNameA
GetConsoleCommandHistoryA
CreateHardLinkA

user32

WinHelpA
DefFrameProcA

gdi32

GetICMProfileA
TextOutA
GetCharWidthFloatA

Sections

.icode
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 886B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ