f57da6772d9eb4ce2d0e3ce32b1f8b35_JaffaCakes118 | Triage

Sharing

General

Target

f57da6772d9eb4ce2d0e3ce32b1f8b35_JaffaCakes118
Size

53KB
MD5

f57da6772d9eb4ce2d0e3ce32b1f8b35
SHA1

c771fe48c73901a9f02088179e91e68a3a3feffb
SHA256

619367ca7d99de1d709203ddd69680af8c0ce92d0321109be1637a582265ec24
SHA512

5076a379f44c367749578201c0765016b80f98d0c6431ad8626924891ff1d2d7fadd82958654c8db4e128d75789903f08b9a9eb359e18da2ca72ed54e4773385
SSDEEP

1536:jWkPNwJUwe36dNrB1DgHWEyaXK5dzkoerFiXW4I:KmwOwpFkH8nzk7YXW4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57da6772d9eb4ce2d0e3ce32b1f8b35_JaffaCakes118

Files

f57da6772d9eb4ce2d0e3ce32b1f8b35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c56c933575f92d9d15212026ee8e057

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
EnumDateFormatsExA
EnumSystemCodePagesW
ExitProcess
SetCalendarInfoA
SetThreadAffinityMask
VirtualAlloc

advapi32

ChangeServiceConfigW
CryptGenKey
GetTrusteeTypeW
IsValidSid
OpenBackupEventLogA
QueryServiceConfigA
RegReplaceKeyW

user32

CreateWindowExW
DdeAccessData
DlgDirListComboBoxW
DlgDirSelectExA
GetClassNameA
GetKBCodePage
GetMenuItemInfoW
GetTabbedTextExtentW
LoadCursorA
LoadCursorFromFileW
MonitorFromPoint
OpenWindowStationA

gdi32

DeviceCapabilitiesExA
FrameRgn
GetCharABCWidthsFloatA
RectVisible
SetBoundsRect
SetTextColor
TranslateCharsetInfo

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE