d419325a573a2b779cc4e97009012019_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d419325a573a2b779cc4e97009012019_JaffaCakes118
Size

94KB
MD5

d419325a573a2b779cc4e97009012019
SHA1

d78772857a78aa9e1bdbe96db9c5a60551db8ea5
SHA256

c2db059832abaac9ede1f3d4c0e797a13327267b59e84fdd92cb2c789ba95ac9
SHA512

e74b78f72421013d495f7145f0eb148267a77db888c255f3502774b0fddf69cdb464558a40d52c472bc7e1987275657742947f7b44f883f8723c360b8a8bbfa8
SSDEEP

1536:b/pPqbT/37rfB2pipp2BviA/MpLQhAYwaY4omrzhkZL4UHyUKdvE+2W//e+06xyP:rpPqP/37rfB4ippwqA/MtQw4ZZkZL9HN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d419325a573a2b779cc4e97009012019_JaffaCakes118

Files

d419325a573a2b779cc4e97009012019_JaffaCakes118
.exe windows:5 windows x86 arch:x86

06f8b0204b1b95ae011e9feb66da8d8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
VirtualProtect
InitAtomTable
IsBadCodePtr
IsValidLocale
ReadFile
SetConsoleCP
GetModuleHandleW

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE