e9e269e837da2fa1a081dbfede5b4c75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9e269e837da2fa1a081dbfede5b4c75_JaffaCakes118
Size

337KB
MD5

e9e269e837da2fa1a081dbfede5b4c75
SHA1

12f53fad36c6bfbcd38f6907e159b00b2c6412cf
SHA256

ba0238a66c0604532a2710b75c5675473e0655e5bbe2246e535db151e7034c00
SHA512

9745145aec6873782c9b5464a0ab333bc4af07d5e7cee66b7b25a10eb903b9b90953a7560b05ba9b6e64a2e7c9257714544ed796ef0e5e3ddfa76ef7b0c764b5
SSDEEP

3072:sT+3ap+eAGo+uZLeeVwH28MxGCmuDjuNO43CdfKpKyKFqp9AiFp/Z+XHf71pvlQ:sT+3ap9R6m2pGSEO4eKUqfBN8HJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e269e837da2fa1a081dbfede5b4c75_JaffaCakes118

Files

e9e269e837da2fa1a081dbfede5b4c75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935e93087b031229795c061800a68bb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldr
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ