1064590a6b040011ea424461e8e267be_JaffaCakes118 | Triage

Sharing

General

Target

1064590a6b040011ea424461e8e267be_JaffaCakes118
Size

30KB
MD5

1064590a6b040011ea424461e8e267be
SHA1

6c74fe68d499a9e8dbf977edfc8971a6711e6872
SHA256

ddc9a5ba6393cec7cf65deb0a803eb21d05f313c576715bd7510efa694d381c1
SHA512

8d8341cee12f02a5f5a4562c6eedba9deeb6ffb99ad5f6d5627ad87c5b7e2e6533e784a10394787f95598b21b081bf00f7deb0659330fe1c04be3666aa6da918
SSDEEP

384:qlwkRyxdWO7bK21Tb3rfu7j9i7uCbdFs7NQyMMAnQIazW0TaOPAOT2VZXwZQ:qmkRyxdrh1Tb3oi5sJzM1tf0TpAtVZCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1064590a6b040011ea424461e8e267be_JaffaCakes118

Files

1064590a6b040011ea424461e8e267be_JaffaCakes118
.exe windows:5 windows x86 arch:x86

35bf7ad9a4e143db4cd772df6471bcb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateBitmapIndirect
GetCharWidthW

ole32

CoGetPSClsid

msvcrt

_snprintf
_tolower
_sopen
_hypot

kernel32

GlobalDeleteAtom
GetCommandLineW
lstrcpyn
BeginUpdateResourceW
EnumDateFormatsExA
GetProfileIntA
GlobalFindAtomW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ