baf175c1a330fa7907c8fb863fb4bdff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baf175c1a330fa7907c8fb863fb4bdff_JaffaCakes118
Size

43KB
MD5

baf175c1a330fa7907c8fb863fb4bdff
SHA1

a10568acdbcde26ab3659f6717e1124e5d02e87f
SHA256

fbf18b3360c5e95082a4ae8583a6bac232afa53aba6a25505201f3f20da00e2e
SHA512

cb7f2e2a2b6ec74745df6f4835d6756e6afc6b57d70854b7ffc6769fd8ccecbc766cce89f84e5a41f5f6c20902f5db83b7915bf6013dd72f90b50486e705ad20
SSDEEP

768:AHp7HnD7HIkxY3D7HU3D7HZsWObKpctPFdH0AYRqlrpIeJj/akZ/B+Axfw08VO4a:AHp7HD7HdxYT7HA7HmWObIctPFdH4I+M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf175c1a330fa7907c8fb863fb4bdff_JaffaCakes118

Files

baf175c1a330fa7907c8fb863fb4bdff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2f4ce37c85a0216f3e53d5555dfa0b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExA
GetConsoleInputExeNameA
CreateEventA

user32

CharPrevA
GetPropA

gdi32

ExtTextOutW
TextOutA
GetTextFaceA

Sections

.code
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ