e8a4758f8f5d6b0b653c7f22b0600a32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8a4758f8f5d6b0b653c7f22b0600a32_JaffaCakes118
Size

25KB
MD5

e8a4758f8f5d6b0b653c7f22b0600a32
SHA1

9542a61128534666470fa4591f869ebc0098abb9
SHA256

79f5cc707fd9e00af62592be4b379817860600e90bf373ed15c4f6aaa74ad844
SHA512

e4a21a62d30dc9e2022461ea303ce89f67ea010c2a4814d40a7885c11c081bf8ed05ba4a28a61374fbd96430a4fb49c072348e4253e4437060a5866b4adac01d
SSDEEP

384:JnFNtcIc91rY0n7zXVxH95ZW4GQJCi1Q9IIMsWJYl3SFp4NW6JfhCXV:rhIr7zXXHjZ5JrgIrsyuQ4tJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8a4758f8f5d6b0b653c7f22b0600a32_JaffaCakes118

Files

e8a4758f8f5d6b0b653c7f22b0600a32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a8cd72a809ca029e592b7e65cc1fab0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseDumpAppcompatCache
MapUserPhysicalPagesScatter
lstrcmpW
ReadConsoleOutputCharacterW
RemoveLocalAlternateComputerNameA
MoveFileWithProgressW
Toolhelp32ReadProcessMemory
GlobalAddAtomA
QueryActCtxW
DosPathToSessionPathA
_hwrite

user32

ValidateRgn
DdeFreeDataHandle
OpenInputDesktop
DdeAccessData
BlockInput
ReleaseDC
InsertMenuA
GetKeyNameTextW
DdeClientTransaction
GetUserObjectSecurity
BeginPaint
SystemParametersInfoA

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ