ff46d72d666774ae9a0cc771a75f50a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff46d72d666774ae9a0cc771a75f50a5_JaffaCakes118
Size

49KB
MD5

ff46d72d666774ae9a0cc771a75f50a5
SHA1

2438b9368cbdc016be2e61e2567d7c0a3378fa32
SHA256

4cde1f93bf3f902ec1d36836d435e01895d27cfcd1795f9ded10d983685644a0
SHA512

e00703d7d43ea3d9498a956215b6913c9bf97a3ef5f5815bd0973e415a785a8db9836f36296fbcd34fc7470e84a109939cb0b6e9a9d4166db98e8dda09c905e7
SSDEEP

1536:sZOFSPH6GdD7KsGIzH4Yv4YreBFM45t5YEmsN94QA4SsK:swkf6GdHKodQaCMwzosUQRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff46d72d666774ae9a0cc771a75f50a5_JaffaCakes118

Files

ff46d72d666774ae9a0cc771a75f50a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5444b32f4b8492425b8f50c9182933e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

Sections

.text
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE