10d16a58940aa4b24732443c3279c95e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10d16a58940aa4b24732443c3279c95e_JaffaCakes118
Size

180KB
MD5

10d16a58940aa4b24732443c3279c95e
SHA1

49b807e9b32c0ca4e1a3e9689f95a3e1dab0ff42
SHA256

f09de017240c983971482fe17b9329352d74115247bbe9f8ce07c2f83b908375
SHA512

4b744c902509450a2f772c3cc03a63176fee9a52fb1718108f996d99646821e4fc6d888c701c8dd00dbbf100ecbb84b4f61f2715dd8c5543116f85ccdbbc5492
SSDEEP

3072:KzbKbx7q+Wi7wKI1nVh9f99rkQbPQGcXUPRPe1K0wFKTxrVZi3VhEi:KvKNm9Ff99DYLS9mFTxxZi3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10d16a58940aa4b24732443c3279c95e_JaffaCakes118

Files

10d16a58940aa4b24732443c3279c95e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e2a7c5251340ed7d687c3fbb220915ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetFontData

user32

IsCharUpperA
IsCharLowerA
GetDC

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ