d9b397ab0c1529aa58ef15855409f958_JaffaCakes118 | Triage

Sharing

General

Target

d9b397ab0c1529aa58ef15855409f958_JaffaCakes118
Size

20KB
MD5

d9b397ab0c1529aa58ef15855409f958
SHA1

9e995c73a4adf91b9553b1c52b7afbd1a557c6ec
SHA256

b90d897c8ee619f31a26dbcadcd3d5065a31ea5d959796beba3afd92021f77de
SHA512

a5ff5d70a3a9432ca9d9e5cf5a199d84d2c8656886efadbd8c4a950676948b2372917663ef4ff6a14f48347f66e2227395dc905bf36872064f84bfbdb0bb12bb
SSDEEP

192:1O3OapAwlbeFDHOHUkg6mziDzLIJ2LDaKLS55TZpos/DW1DmU:18OyA140kIJgaKo5TZOaDdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9b397ab0c1529aa58ef15855409f958_JaffaCakes118

Files

d9b397ab0c1529aa58ef15855409f958_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9067a98dfbf4faee06c78db9fa222a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitThread
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtectEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srt
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ