b77f45f1cb4f698c47bb13fea2f3fd39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b77f45f1cb4f698c47bb13fea2f3fd39_JaffaCakes118
Size

152KB
MD5

b77f45f1cb4f698c47bb13fea2f3fd39
SHA1

cc975ed1bbe9aa2ca81e3848fcc74248b5c797e8
SHA256

a62f29cab3eb1a7afcbe8cc3da91b1c35180cc89b61c042082e3ded7dd5014b0
SHA512

b436f1f4c799056ec226baa4d70b841273fcd282226797f6600432333d78aaa87a7cd5707ae6bb9c4bfbd86c122709f26f1ad98fc61991d53269c66fde7300cc
SSDEEP

3072:n7y8PTngsyGOjiZ0f5kFMRW+VNFvm4e0MDw:7yBsIjiZ0RNF/e0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77f45f1cb4f698c47bb13fea2f3fd39_JaffaCakes118

Files

b77f45f1cb4f698c47bb13fea2f3fd39_JaffaCakes118
.exe windows:6 windows x86 arch:x86

c8eb5a8c64d887af2c0087f59c461fb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

pdh

PdhEnumObjectItemsHW

ole32

CoRegisterMessageFilter

oleaut32

VarUI2FromBool
VarR8FromI4

user32

DrawMenuBar
GetWindowTextLengthA
InternalGetWindowText

kernel32

GetConsoleCP
FreeConsole
GetBinaryTypeA
GetModuleHandleA
SetConsoleCursorInfo
GetConsoleOutputCP
GetConsoleWindow

opengl32

glMultMatrixd

rpcrt4

RpcStringFreeA

advapi32

QueryUsersOnEncryptedFile

gdi32

LPtoDP
SetTextCharacterExtra

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ