04b89654834e8eeb3095b699c91d1e3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04b89654834e8eeb3095b699c91d1e3f_JaffaCakes118
Size

244KB
MD5

04b89654834e8eeb3095b699c91d1e3f
SHA1

26feef74fea2126492057028f6cf38247ce1aaff
SHA256

2e373c3270dd8f01b808e1dc12b9770046a4db6c3de00e1bd9a001a64e03ef17
SHA512

0be14aa3a01a4c6112c36e1c9bfef9d07a956f74a9cb14d98bcfe287238837b05f50242db087ff38ffbe78a9df00263d17f32718a21ae29e3245bad9ba397d32
SSDEEP

3072:JwId1xKr+z1lwrHFMJMg38Uf1d0CtP84EYnmegxyM7cRvFI6eOIs5qEkps7Gks+f:Cy+U1wMrNndP8XyWcomBqFxkF/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b89654834e8eeb3095b699c91d1e3f_JaffaCakes118

Files

04b89654834e8eeb3095b699c91d1e3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71995bda3348129b6dbfd964e8582bf1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
GetUserDefaultLCID
CreateEventA
GetModuleHandleA
DefineDosDeviceW
ReadConsoleOutputAttribute
ReadConsoleW
OpenFile
MultiByteToWideChar

user32

SetMessageQueue
GetCapture
MapVirtualKeyW
SetRectEmpty
CreateDialogIndirectParamW
DrawAnimatedRects
SetClassLongW
GetKeyNameTextW
BeginDeferWindowPos
SwapMouseButton
GetForegroundWindow
ScreenToClient

gdi32

CreatePalette
InvertRgn
GetClipRgn
LineTo
CreateBrushIndirect
CreateColorSpaceW

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE