be8ae826959380d227e9384e4b31b4a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be8ae826959380d227e9384e4b31b4a5_JaffaCakes118
Size

247KB
MD5

be8ae826959380d227e9384e4b31b4a5
SHA1

ffcd112c64f1b4aa33d078c1207dfa7b39cdf5da
SHA256

7b24d29183c955fea9ca8574a3a5fc89a3fe50c187105e763387bdeb6bb0810f
SHA512

b0cb4a882a48919728cc91cdefe45456cc9346a3e10d51b761916c27105d516e0d0b3f778820bb4fb6e66468b8e8143f97a2bf0669b3766bd09734a631183233
SSDEEP

6144:lQC7S+4iryeV5J/pOdLEZmmeMMMBqoIjl82mDeZiOQStZZ:h7S+4SyIEoIjl8fouStZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be8ae826959380d227e9384e4b31b4a5_JaffaCakes118

Files

be8ae826959380d227e9384e4b31b4a5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e798ad8d75aa8e88764fd22bd958004

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
CreateProcessW
OpenMutexA
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx

msimg32

AlphaBlend
DllInitialize
GradientFill

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE