0071dcb91a63949f0d9576ea8f0dd0c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0071dcb91a63949f0d9576ea8f0dd0c0_JaffaCakes118
Size

20KB
MD5

0071dcb91a63949f0d9576ea8f0dd0c0
SHA1

0501ab9b6ce69409d8e6554835a519a3b42d2847
SHA256

064ce81b69fd35952dfa416da2a45e2185d344b7f839d9e3c566f7000285031d
SHA512

d87d0d8d7e7d51aa02e6f4a83bc8da41cf55b7c7078db1198121c8cc65de15611c5499797f65f8872be17aa92e0f3c1d765995d05c15eb36dfa1cc8d71f979f9
SSDEEP

192:XODzlbeFD4U4rWcNG2o2QilfGvYZlxThBX34ImNpkRomVO8e:XSwd4rS5Cf4YZJBIORomM8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0071dcb91a63949f0d9576ea8f0dd0c0_JaffaCakes118

Files

0071dcb91a63949f0d9576ea8f0dd0c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9067a98dfbf4faee06c78db9fa222a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitThread
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtectEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srt
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ