376e69c4999e02a887aed1d4f89f2839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

376e69c4999e02a887aed1d4f89f2839_JaffaCakes118
Size

7KB
MD5

376e69c4999e02a887aed1d4f89f2839
SHA1

991ac913f10cf20f635b2fce3ef0d0364175595f
SHA256

b2c557332d74cd8b25dc173d3b17984180c9ee19337a70eca70a7d412a772461
SHA512

a8b8b952d9bcd395b6b6e15c4cc08b617ca2214e287271a29867d71163b3b50d185bfa4e91284919df0512149427f7971bcde9c77cb710821583da929aee9a65
SSDEEP

96:7D8QQT7AO1OGm/GHbQrtWhUyyiOyNJDjFMsDhxw6H:7DzQH1OGbQrSUgjFhxRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376e69c4999e02a887aed1d4f89f2839_JaffaCakes118

Files

376e69c4999e02a887aed1d4f89f2839_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4755e7eddbdcd1d153fb2cce321c3a51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePolyPolygonRgn
EnumFontFamiliesA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE