5742e3a526ae6e4096a43bd50e6f8b8c_JaffaCakes118 | Triage

Sharing

General

Target

5742e3a526ae6e4096a43bd50e6f8b8c_JaffaCakes118
Size

73KB
MD5

5742e3a526ae6e4096a43bd50e6f8b8c
SHA1

26ad61d1345628b2097f36e83384d266128a6ac6
SHA256

ef364b2297f8a1b0c205452a333da2fe0c896b6a462255353c0b1fb49a5d90ab
SHA512

a6e72a53a2dcff98bfb8251bfe93c95b10b01bd8001b17429d10257e3393942ca894a911b9ced29a3047edf5ff6a09fbe2d4d95b801b22c595b1111c86c22c4d
SSDEEP

1536:q9J6qxUDEeMtfQArQw4o+HmnvTgUzfiVXdGixCnL1fgeW0YkSbToiuagnp:AJReMtfQmQw4o+G7PivGixiW0YkMTofX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5742e3a526ae6e4096a43bd50e6f8b8c_JaffaCakes118

Files

5742e3a526ae6e4096a43bd50e6f8b8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7117932e13f139fdfc10fca459407204

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE