dd20ec52e1f10ccf4d69d9925e493a98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd20ec52e1f10ccf4d69d9925e493a98_JaffaCakes118
Size

660KB
MD5

dd20ec52e1f10ccf4d69d9925e493a98
SHA1

67ac06895ba51eaf37cb02360258f6306c7dd5a3
SHA256

157a4622fea5517fe3d4ed297b4bd590b324816077ffaccc47c742caf655a3d9
SHA512

d54070fe133138c878e49102a088f3337f948e1a429f4eefea849da2a7f48088b651c75cfdcce979364202ac9c76351f829414c28ed02aeebf9d0f57a850e125
SSDEEP

12288:QVJ/ztKMzmi850iGnu7CaD54vE73dWMyhGJ2pQ5vMHjTexYnVmdW8n/m:GJ/zwMqR/8aWE7dohGJsQ9yjTexoYdPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd20ec52e1f10ccf4d69d9925e493a98_JaffaCakes118

Files

dd20ec52e1f10ccf4d69d9925e493a98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b05c727d8f2a090664587bae7eb2ce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

WriteFile
CloseHandle
CreateFileA
ExitProcess
GetModuleHandleA
GetProcAddress
SetFilePointer

gdi32

EnumFontFamiliesA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ