f49beca47279981eec8036d706a9d542_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f49beca47279981eec8036d706a9d542_JaffaCakes118
Size

32KB
MD5

f49beca47279981eec8036d706a9d542
SHA1

dd3630772d68bd7359a1ad75df986beb41172ae4
SHA256

88500d56b0e7fd1e2c49a14758a601d86f105e2c113db228dbd6fa488284b7c1
SHA512

dc828fdbdcddedc43cd52da513cab5c3d4be2133bf7bb8c32b302a6398361f722cb7123d7e04e2ba1c0f4feda1e1ceb6a121ea79cbc2dc1f4d53c74b2e5455a3
SSDEEP

768:WDAfd8+Zqg32fooxDbM9dtJ3CQOn0pkQQ29U4nGPquu:WDCdkrfFbMdtt3O0pkepGFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f49beca47279981eec8036d706a9d542_JaffaCakes118

Files

f49beca47279981eec8036d706a9d542_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39fcd32cac8d594a350e91937a16d408

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClipCursor
GetWindowContextHelpId
ChildWindowFromPoint
RegisterWindowMessageW
SetActiveWindow
RegisterTasklist

kernel32

GetLastError
VirtualProtect
DeviceIoControl
CreateJobSet
GetWriteWatch
WriteConsoleInputW
EraseTape

gdi32

GdiCleanCacheDC
GdiConvertAndCheckDC
CreateICW
GdiConvertBrush
GetMetaFileBitsEx

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE