dd5c2e9dda7334df2380a0488ffb6f2e_JaffaCakes118 | Triage

Sharing

General

Target

dd5c2e9dda7334df2380a0488ffb6f2e_JaffaCakes118
Size

111KB
MD5

dd5c2e9dda7334df2380a0488ffb6f2e
SHA1

0e1e0c81cc0abad89744836754f7e236e79f3fe3
SHA256

0ab5959e656deab3da4756ebe60d5b0460682d6f3958cd307ed48a186bbed1c1
SHA512

ba40bd8ca63affdc71cec4875a91fbcba81f108e39a0eceb9ea8180e83639f131afcc7948fd72fddccfe0c52aaeae0c3ba35810ed76dac086be97d63163c59b0
SSDEEP

3072:oWCmZN2H0aOIMT42CN753KBTurNT4rWUkeIRwlVip:FZWPo4r153xNThcI2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd5c2e9dda7334df2380a0488ffb6f2e_JaffaCakes118

Files

dd5c2e9dda7334df2380a0488ffb6f2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE