0c79d9dbabb621fe3702fdeecb43a816_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c79d9dbabb621fe3702fdeecb43a816_JaffaCakes118
Size

26KB
MD5

0c79d9dbabb621fe3702fdeecb43a816
SHA1

147614ffcccdb4fa564249d7935d34afe8279b03
SHA256

12f31469eb20169b60e6509701fee65b71fc2c973cd342841a240901d6b2ae0a
SHA512

feb3762c85bf704fb11ab517d9ae1a5f5ecd7e5241acf19f806101f8d70ddaa135c9a6b70bd2f60f63d4d8901c09c16c30dc9c02d57f971ac4411869a0ffdee4
SSDEEP

384:g6rwapFxxHsZRjGYrGf9c9pQvXPAlst7t4ZiO1JtXGazoHrgAT/Gx3:g60ah6XjGG+9cwqC8iItXGKoHr7T/GJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c79d9dbabb621fe3702fdeecb43a816_JaffaCakes118

Files

0c79d9dbabb621fe3702fdeecb43a816_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be286ea76d600d4141d643e13ee5b9d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsW
EndUpdateResourceA
SetConsoleDisplayMode
BaseCleanupAppcompatCache
EnumLanguageGroupLocalesA
GetConsoleCursorMode
lstrcmpW
SetHandleCount
WritePrivateProfileStructA
GetConsoleCommandHistoryLengthA
GetFileInformationByHandle
ReadConsoleOutputCharacterA

user32

RemovePropW
GetIconInfo
RegisterClipboardFormatW
ReleaseCapture
RealGetWindowClassW
IsClipboardFormatAvailable
SetWindowStationUser
DialogBoxIndirectParamA
DdeUnaccessData
LoadKeyboardLayoutEx

Sections

.text
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ