f456acfeedd116262f15b7866dcc9183_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f456acfeedd116262f15b7866dcc9183_JaffaCakes118
Size

190KB
MD5

f456acfeedd116262f15b7866dcc9183
SHA1

47d5f570d861cc5926037588de57a7fb4f6019e5
SHA256

9660958428d96e80c2cca0703a5068bec26a6c03f6a5e715c96f8b9dd766c000
SHA512

5d629d34c9e03b0ec096823ca4fa96e6dcf6c576253cd051e371bb12966fe8dc407a72a6bfa6f8b43ee2c9e174aaabc5fb9dfa9d369180befb9bb8b381238c1e
SSDEEP

3072:Gg6gRNuMtFJHSV5A3DatFg8MxcHFJzgl3fnZuTzIsJmfonK1IJa6yCEnfwPDlop0:GgemJHoG2tlMaHXgDshn2IJaDCMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f456acfeedd116262f15b7866dcc9183_JaffaCakes118

Files

f456acfeedd116262f15b7866dcc9183_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe9d48a974c209b71d6eec0308efe78a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExW
lstrcpyn
GetFileAttributesExA
WritePrivateProfileStructW
EscapeCommFunction
GlobalWire
CancelWaitableTimer
VirtualAlloc
SetVolumeLabelA
SetConsolePalette
DeleteVolumeMountPointW
FindVolumeMountPointClose
SetMailslotInfo
SetConsoleFont

user32

SetCursorContents
IMPSetIMEW
IntersectRect
UserLpkTabbedTextOut
CopyAcceleratorTableW
GetMenuItemID
RegisterSystemThread
GetSystemMenu
VkKeyScanExA
AdjustWindowRectEx
UserRealizePalette
EditWndProc

Sections

.text
Size: 9KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ