aaf0d15c410ea09ee7635ec28450064f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf0d15c410ea09ee7635ec28450064f_JaffaCakes118
Size

397KB
MD5

aaf0d15c410ea09ee7635ec28450064f
SHA1

bea2e21630ac59535d6bdee75b181cc25169edc5
SHA256

ec2ebc99839808e2c4caf487be9f9a14a11b99ec4d10acd7d2d99fba0b87757a
SHA512

39dd8df58fe6ed36a756c957d963ad0bda4ef33b453c016cd5c59e6fbdec9297c59602b61781cf055f90d7064c4b9efc671d39ce7eb8be03d262c74faf23df2e
SSDEEP

6144:J03a04bWqbBjNBE/zDZnPhiqryBCmSteSGdmlE:J03a04bWiBjNQDphiqrftWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaf0d15c410ea09ee7635ec28450064f_JaffaCakes118

Files

aaf0d15c410ea09ee7635ec28450064f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

46454b2696c54c87c668d8996106ac7d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ehrjrhw.pdb

Imports

gdi32

GetClipBox
SetTextJustification
EnumEnhMetaFile

kernel32

ReleaseActCtx
GetSystemRegistryQuota
GetCommandLineA
GetTimeZoneInformation
GetModuleHandleA
SetSystemFileCacheSize
SetFileBandwidthReservation

shlwapi

SHRegGetBoolUSValueA

advapi32

SetServiceBits

setupapi

SetupCopyOEMInfW

user32

ChangeClipboardChain
ReuseDDElParam
GetSubMenu
IsMenu
PackDDElParam
GetWindowThreadProcessId
GetDesktopWindow
GetInputState

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 283KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ