040e7ca7e36ba37e46ecbf2599d6e498_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

040e7ca7e36ba37e46ecbf2599d6e498_JaffaCakes118
Size

244KB
MD5

040e7ca7e36ba37e46ecbf2599d6e498
SHA1

a49bff6a2955d2dc205f7917632462a985e064d1
SHA256

9627e93d1c2dbb5761072f4d35169b3945bbabf0cad052186c5595d270fad9ba
SHA512

60452825ef4b4e66871d339e0243763672c6c20b86bec7ff47770de026082b0bc4da1393f1e33358c61111e0f569ca2044a80972906633a04fce6a21851ef829
SSDEEP

6144:SpIEVqw0ioAmQjPbcSQubQ3Lc5MUkX43O/3F:SSUqw0ioAmXSQubQJ/3F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
040e7ca7e36ba37e46ecbf2599d6e498_JaffaCakes118

Files

040e7ca7e36ba37e46ecbf2599d6e498_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5aee71c19e7e39e10384d90fe0f4d162

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapValidate
VirtualProtectEx
GetTickCount
GetConsoleCursorInfo
lstrcpyW
GlobalFree
SearchPathW
GetEnvironmentVariableW
GetTimeZoneInformation
Sleep
EscapeCommFunction
AllocConsole
VirtualProtect

user32

CharUpperA
GetMenu
GetCaretBlinkTime
ClipCursor
GetWindowContextHelpId
DeregisterShellHookWindow
GetClipCursor
SubtractRect
GetKeyboardState
GetTopWindow

gdi32

GetDIBColorTable
CreateBrushIndirect
CreateColorSpaceW
SetSystemPaletteUse
CreateCompatibleBitmap

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE