450a469b3abbf32a8075dc8fcf843b37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

450a469b3abbf32a8075dc8fcf843b37_JaffaCakes118
Size

44KB
MD5

450a469b3abbf32a8075dc8fcf843b37
SHA1

d21e1f0f5bcee7b3baa56b9c55d9f612a78c143b
SHA256

1ec3c197caeb9a12efc269c8a3362f23036b0a6f65ab6ffe593c1bf21931226a
SHA512

e4f4cc43b654a6ac2a31cef348d0b32d284776f5af2c7f94afc24f171b41853a9867bc729b9c763cad1fc998e4fde44466f4716934ba2b9b88f864b619ef29c4
SSDEEP

768:AYXDHxMtWOzX95Qnt2Tezgvb5mTEOFRl53nCj:hXFM1ztc0T6gvbII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450a469b3abbf32a8075dc8fcf843b37_JaffaCakes118

Files

450a469b3abbf32a8075dc8fcf843b37_JaffaCakes118
.exe windows:1 windows x86 arch:x86

29bd3ba3bda40d12c805a60c6463dcdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixelFormat
GetTextFaceW

kernel32

GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

user32

GetMessageW

Sections

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ