fa1147ebde7ab647575a3e7e92443109_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa1147ebde7ab647575a3e7e92443109_JaffaCakes118
Size

146KB
MD5

fa1147ebde7ab647575a3e7e92443109
SHA1

41f1e0bd5b2af1ae0fa20560bfe9d343269f9efb
SHA256

d27c11901e366a7bc5c252376868ab1e8d4c23d0245e6416c649ab48b7d5e01e
SHA512

1d7ef56e0a34c6f188a0f089ba023713aa4d83986d390df291f91665fbf6a9083e800b1ae96dbd1c53c79158eadda92c2316dd2c8508006b0d38c8f0c6c80489
SSDEEP

3072:DAYcO6xoqGrJKiY64ymT93suPld65t92IDz73kNkyM:DAYcO6OqGsDTlJPuVzIN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1147ebde7ab647575a3e7e92443109_JaffaCakes118

Files

fa1147ebde7ab647575a3e7e92443109_JaffaCakes118
.exe windows:5 windows x86 arch:x86

53d125eb700e6cae6c50329a03e67b9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetStringTypeW

user32

GetMenuState
GetAsyncKeyState
SetPropA

gdi32

CombineTransform
StrokePath

Exports

Exports

ehgvishgu
pwhaovqmgdftvpi
wwxuwordvhuoon

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ