55fdb8e84ba6b144f34e044701050df7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55fdb8e84ba6b144f34e044701050df7_JaffaCakes118
Size

78KB
MD5

55fdb8e84ba6b144f34e044701050df7
SHA1

ba9f1242234acfb34608bb042d95cc9d48678935
SHA256

f49e89bfa80eb076bafaaa6bfdf6b798e88f5fc959ba78c750a00500d8a64436
SHA512

be8f5e358d0b4f1c8545a155af9560d7cf199068b2cb78a706107a799cd12d277865934d4ec64f0faa11c2fcdc41f4b3fddf26b8acee507a2dd10c55dc7a0810
SSDEEP

1536:MMalP66XlKW1Bt+n8zrYGvLIDxuTQnF5azqW5n2ThA3+RNexPnyAqTnfnd:MMsP6tu+8PHvLHQnFxW5n2ThWsNexPns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55fdb8e84ba6b144f34e044701050df7_JaffaCakes118

Files

55fdb8e84ba6b144f34e044701050df7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2beb791b1f1cc7b05a7ab4dc020ef882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
SetCurrentDirectoryW
WriteConsoleOutputA
OpenWaitableTimerA

user32

DefFrameProcA
GetWindowTextLengthA

gdi32

GetCharWidth32A
CopyMetaFileW
GetObjectA
LineDDA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ