38331f62959ad1170d7ca41308dd25de_JaffaCakes118 | Triage

Sharing

General

Target

38331f62959ad1170d7ca41308dd25de_JaffaCakes118
Size

21KB
MD5

38331f62959ad1170d7ca41308dd25de
SHA1

6435444bfecd9979e2fa91c95aa0578144179b9c
SHA256

69ae1ad2d5c212c8024d0e4f8ab31414481136864fbab9bab093bbcd387d8f71
SHA512

00713e23fd7a5552a747942a46e65d2ba9c27ea5822fcc13f2c2b743dd5382beffc84c8b61c1abe6107dda2c767d21e43984816c84345d9d610451e63b94f80e
SSDEEP

192:ZXFl9PBzthAkUa39k3IgOhzy3/8N/wOeibBH1efK45dra:ZXP9P73K3hOhzyPelewBVefK46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38331f62959ad1170d7ca41308dd25de_JaffaCakes118

Files

38331f62959ad1170d7ca41308dd25de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a36e75e63b6c08e6880068b4cb92b8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
lstrcatA
LocalAlloc
FreeLibrary

gdi32

CreateFontIndirectA
GetTextColor
MoveToEx
GetStockObject
CreateSolidBrush
GetTextExtentPoint32A
CreateCompatibleDC
GetBkColor
SetROP2
GetTextMetricsA
SelectObject
DeleteObject
BitBlt

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ