3d6eb0c74c604f3eaf3eb9d3778d807a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6eb0c74c604f3eaf3eb9d3778d807a_JaffaCakes118
Size

27KB
MD5

3d6eb0c74c604f3eaf3eb9d3778d807a
SHA1

99085a35e4ec2ad194dac696acb01feda2ac37d7
SHA256

8986f90763d056effa15a4ea3eaed960b372c399096f88931392e9f9f9d13c23
SHA512

638e087cd1a45109de4d2e21e3a1ec6b80ca9f8f29ac63b4c97fcf353b3001cb6fa28b001de1b6c6f762d63f9bc412f395e66fccead525de233d86806bea6b7f
SSDEEP

768:KVUKmZ5CCI1j8sFJFFFFFFFFFFFFFFFxFFFFFFFFFFFFbFFFFFFFFFFFFFFFFFFL:W8Z5z74BHFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6eb0c74c604f3eaf3eb9d3778d807a_JaffaCakes118

Files

3d6eb0c74c604f3eaf3eb9d3778d807a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62e3b806ed81536c21560b3beb6511a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
CloseHandle
GlobalAlloc
GetVersionExA
Sleep
GetTickCount
lstrcatA

gdi32

LineTo
GetTextColor
MoveToEx
GetObjectA
CreateFontIndirectA
GetPixel
SetBkMode
ExtTextOutA
PatBlt
BitBlt

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1019B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ