0ba75d69538713878520b1b30a57178f_JaffaCakes118 | Triage

Sharing

General

Target

0ba75d69538713878520b1b30a57178f_JaffaCakes118
Size

698KB
MD5

0ba75d69538713878520b1b30a57178f
SHA1

8cce495a299f666d7b8afd1a9c448dcd01d33688
SHA256

e99b3bc7aabc949b2db09934308928fdac6d049c8050a9d302b6f765cdfb61e3
SHA512

d2c0e3e87a72f3a2e63682ed37e8ae815ecd5c9885fd1d33ed5ab97f00c91e3a5bc1e4c96ed18e63cf6ba7fe37757a5cd7b95bfd2803405078dd5f24972f31b0
SSDEEP

12288:0gtFXO3ntfXVjJ/uLMfu8LKjS4zZAYcxfRYpfpg3:033ntffmLMfPISYd4OQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ba75d69538713878520b1b30a57178f_JaffaCakes118

Files

0ba75d69538713878520b1b30a57178f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c877c78c094f3fd9d1a71c4a95337d51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetTickCount
GetCommandLineA
CreateEventA
CloseHandle

gdi32

CreateSolidBrush
GetTextExtentPoint32A
BitBlt
GetTextColor
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA

Sections

.text
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 693KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ