JaffaCakes118_18a29d6f43b0aa039f0e7bd0f79d8a11 | Triage

Sharing

General

Target

JaffaCakes118_18a29d6f43b0aa039f0e7bd0f79d8a11
Size

80KB
MD5

18a29d6f43b0aa039f0e7bd0f79d8a11
SHA1

15483790dd7522d06f3cce7fc20a9bbefef2010f
SHA256

7d9115dff8b08683245b4a4b6526c221b57f7a9cc2485cea79f69d163615bcf9
SHA512

b26563725a485538cb0936111be03fbb5d29d02fffe1bf404465cdb1402ded450787ab74fad71ff65359e2512760e0d8016609342f360dc7800fc074d6c72386
SSDEEP

1536:GqIEZ7AC8XrBMoov5WHN9QXzkUYL4eT/9mgWkC:GqIERAsooqLQjkUYUeT/95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_18a29d6f43b0aa039f0e7bd0f79d8a11

Files

JaffaCakes118_18a29d6f43b0aa039f0e7bd0f79d8a11
.exe windows:5 windows x86 arch:x86

504d89a1997e38128ac0d0536a06c337

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharUpperA
IsCharLowerA
GetDC

gdi32

GetFontData

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ