e917d8584f7e825b162c6a7e5d8a59ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e917d8584f7e825b162c6a7e5d8a59ee_JaffaCakes118
Size

140KB
MD5

e917d8584f7e825b162c6a7e5d8a59ee
SHA1

6d91ea73383b8784bbaaca218dc5d570bee79dea
SHA256

9010c9aa5816ca3ef4f93ae5ac8dfc2f1bfb0b86c44348fbc6afbc77faba2709
SHA512

3edb30d2b95084f901d52357caa5e272758437b031efef582f9f9b9b86b1db33ea5ce05a6158273ea457fd2ce9fd31a2d916b6ba7a32868c1bddd6edbad55569
SSDEEP

3072:JDdJ1La26vecExNjI6m2ar6aFORwhyDMsOI2EX1IB6:JD1La7vePjI6HluADhOIvXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e917d8584f7e825b162c6a7e5d8a59ee_JaffaCakes118

Files

e917d8584f7e825b162c6a7e5d8a59ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f714638170b95bad7f4f8dd791da346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameA
GetConsoleWindow
InitializeCriticalSection
GetConsoleAliasA
FindNextVolumeW
IsBadCodePtr
BeginUpdateResourceW
HeapLock

user32

VkKeyScanW
ScreenToClient
EqualRect
RemovePropA
GetWindowTextLengthW
TrackPopupMenu
GetDC

Sections

.text
Size: 9KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: 1KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ