dd126ef8f882f83c6fca26cc093b520b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd126ef8f882f83c6fca26cc093b520b_JaffaCakes118
Size

184KB
MD5

dd126ef8f882f83c6fca26cc093b520b
SHA1

e692b95869b4dc6618b97b114790f34b274e6ee4
SHA256

178d0a97ff71c4d08bedfddfc9da9ed012d32bb0f84e407d07a98fcb516e47a2
SHA512

32bf028b8e96799bd341431d50fbee8ff463de32c9da972168fb2c7d428963f7d68dd556d1149373fac4bba747d9288979daa7d657b6e8029c40748698ddda44
SSDEEP

3072:MMsP6tGP6J8y9BLXxePCCpw5vWI8lBO5n2ThWsNexPnCrnSeyuRRp:M1SgyJ8YY1w5v0UnkP+6bKwRp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd126ef8f882f83c6fca26cc093b520b_JaffaCakes118

Files

dd126ef8f882f83c6fca26cc093b520b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2beb791b1f1cc7b05a7ab4dc020ef882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
SetCurrentDirectoryW
WriteConsoleOutputA
OpenWaitableTimerA

user32

DefFrameProcA
GetWindowTextLengthA

gdi32

GetCharWidth32A
CopyMetaFileW
GetObjectA
LineDDA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ