d9b3ddb8e5560e6422b0d89c7f9d44bd_JaffaCakes118 | Triage

Sharing

General

Target

d9b3ddb8e5560e6422b0d89c7f9d44bd_JaffaCakes118
Size

179KB
MD5

d9b3ddb8e5560e6422b0d89c7f9d44bd
SHA1

8b523482cf3af77dc6b1bf74508e018675bbba9b
SHA256

1c016854ca7efd23ef6bd447524d41f4f34e2dbfe95168797c853def16bd07d6
SHA512

30a18faeffd74d0395e3e7adae36c423f999d10845238f6429913dd6dad9542881027553c8190cc3a5c25a1756b4c4d4ebdedf149be8378fd6af0114b3fa92b7
SSDEEP

3072:zns/7KTHQ3TAVwdbicoIXAxSlIgaKcGiY5KWxNoZz+f8FC+tJJkfGKFrr:zk7jsKd+coIXkIIgXIz+EFZJJkLFrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9b3ddb8e5560e6422b0d89c7f9d44bd_JaffaCakes118

Files

d9b3ddb8e5560e6422b0d89c7f9d44bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9197f618b1e5a3463c5db93150d1c43e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EnumFontFamiliesA
CreateCompatibleDC

kernel32

ExitProcess
GetCommandLineA
CreateThread
ExitThread

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ