0655290cca95ab33e1d5ee3fb5eff9a7_JaffaCakes118 | Triage

Sharing

General

Target

0655290cca95ab33e1d5ee3fb5eff9a7_JaffaCakes118
Size

11KB
MD5

0655290cca95ab33e1d5ee3fb5eff9a7
SHA1

3dec84e9c9723affda91fa27de48fc42712ebc4d
SHA256

d2de283dfdd5770ca99dcbb82ead7c30c7c2db4b7e82431b344e758fb10fb497
SHA512

7109d296100fa6d9d099260326f98a95eb1a4ad173935578017d434a38bcc2a06a2e629c3222cc0bd400c87953640c77e7630c7b5a49cff195543e0654019f43
SSDEEP

96:M31i0NA3n37MVrtz7vacW9yV4LoPnqDY3bR4jTjMvAbL3b3oV:M63nEhDW9a4EPnOYKIvAvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0655290cca95ab33e1d5ee3fb5eff9a7_JaffaCakes118

Files

0655290cca95ab33e1d5ee3fb5eff9a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49f8081a852b8ba4fdb50bce38b4a7d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
LocalFree
GlobalAlloc
GetFileSize
GetCommandLineA

gdi32

GetDeviceCaps
BitBlt
PatBlt
GetTextColor
GetTextExtentPoint32A
CreateFontIndirectA
SetROP2
MoveToEx
GetObjectA
ExtTextOutA
SetBkMode
GetBkColor
CreateCompatibleDC
GetTextMetricsA
DeleteObject
GetPixel
LineTo
CreateSolidBrush

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ