1727f1a6f11333e5c1aefb3b7b458734_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1727f1a6f11333e5c1aefb3b7b458734_JaffaCakes118
Size

698KB
MD5

1727f1a6f11333e5c1aefb3b7b458734
SHA1

38a94b655bc1cd9f7a45ec01971ffe4450fea68f
SHA256

dfefa80104216332b61ba6f96f21f8cb280faf6bc61a48d5409c0a064534fb0e
SHA512

916fac662c207a4131d42e3ddb0fd3b31032dfc300fd26ce41a7ed8382dd5898c5a20309f676fb0e821929cf2fcf746c4d1c4f307cb6b5c3811b3083fed5de6e
SSDEEP

768:0c5nnHeEqxw292NzDgF/3UUlS8vbnC/p6z3AS4Cu02j80Sr2QnwE8p4:tf6wu2NzEF/kSzC/pcAlSr2QwE8p4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1727f1a6f11333e5c1aefb3b7b458734_JaffaCakes118

Files

1727f1a6f11333e5c1aefb3b7b458734_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49f8081a852b8ba4fdb50bce38b4a7d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
LocalFree
GlobalAlloc
GetFileSize
GetCommandLineA

gdi32

GetDeviceCaps
BitBlt
PatBlt
GetTextColor
GetTextExtentPoint32A
CreateFontIndirectA
SetROP2
MoveToEx
GetObjectA
ExtTextOutA
SetBkMode
GetBkColor
CreateCompatibleDC
GetTextMetricsA
DeleteObject
GetPixel
LineTo
CreateSolidBrush

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ