0d6a626719adc388463177abd08892d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d6a626719adc388463177abd08892d9_JaffaCakes118
Size

25KB
MD5

0d6a626719adc388463177abd08892d9
SHA1

b34fd7e42b899eed556ec9bcc5534f3cf503b06f
SHA256

f46137ca0dd6ce7782f4b17c39205c95ed5440d1766eec53535f8a4cd435f237
SHA512

8635a7df6649408c998375a29a34ef3381da4948164cd547922d75830c9d160f9d290502ebc3ce344fc2c11624a0903eff49005e8ecd161ce2ff5c78605a1371
SSDEEP

384:z6rXm0Z3Wjm3CwhH3Drel1BIWERDHWv9el74WIIUz6IWIZbAT/NDmQUxOlh4tau:z67TE6SQHmk2v9eiWLyZbAT/N7F40u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6a626719adc388463177abd08892d9_JaffaCakes118

Files

0d6a626719adc388463177abd08892d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd1ba7b4b821c1b2f72da815b83ba665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
FlushConsoleInputBuffer
SetComPlusPackageInstallStatus
CancelDeviceWakeupRequest
EnumSystemLanguageGroupsW
GetConsoleCommandHistoryW
WaitForMultipleObjects
CreateSemaphoreA
CreateActCtxW
HeapUsage
EnumResourceLanguagesW
FindFirstVolumeA
CopyFileW
GetPrivateProfileSectionNamesW
FindResourceA

user32

DrawFrameControl
GetCursor
PostThreadMessageA
LoadAcceleratorsW
GetWindowTextLengthW
MonitorFromPoint
SetWindowTextW
GetMenuItemID
QuerySendMessage
LockWorkStation
DdeQueryNextServer
SetSystemMenu
GetTitleBarInfo
UserRealizePalette

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ