05926eab0a9ef37cb34e1d133f209fd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05926eab0a9ef37cb34e1d133f209fd7_JaffaCakes118
Size

160KB
MD5

05926eab0a9ef37cb34e1d133f209fd7
SHA1

c180ef6663c3286a26ba16232aac4d7815b02113
SHA256

e444172e4d4e251d86ed8ad49ee8f1865f1d12b1d2e594aebc1a217f7199a1f9
SHA512

d3ff36752d05ed15a38c8312856475e44adf464938b362cbfea48eda28a70bb5b502934bfc221c9eb0d3233d932fb46ffff3efe4f33eb2eff5a7b927a20aacf9
SSDEEP

3072:Broi0KFMhKCOgMfxYiQUosJhfv/qoDmXRtni2sz:BqCMZy26/X/SRtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05926eab0a9ef37cb34e1d133f209fd7_JaffaCakes118

Files

05926eab0a9ef37cb34e1d133f209fd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4640487c4fb7ebdf1430fc2753045780

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputAttribute
GetDateFormatW
GetLogicalDrives
GetPrivateProfileStringA
EnumTimeFormatsW
ReadConsoleA
SetCommMask
LocalUnlock
FindFirstChangeNotificationA
GetThreadLocale

user32

CloseWindow
AdjustWindowRectEx
CreateIconFromResourceEx
GetClipboardOwner
DrawTextA
LookupIconIdFromDirectoryEx
SetWindowRgn
DdeUnaccessData
SetCursorPos

gdi32

GetCharABCWidthsW
GetClipBox
GetTextCharacterExtra
GetCharABCWidthsFloatW
GetCharWidth32W
ExtSelectClipRgn
SetICMMode
GetBitmapBits

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE