0ec2d2590be4be0c113d3af652f73f12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec2d2590be4be0c113d3af652f73f12_JaffaCakes118
Size

172KB
MD5

0ec2d2590be4be0c113d3af652f73f12
SHA1

b49d937ab122fbdf1b072918b5c7047ebad2bead
SHA256

e92f8fd4d0e9e7ae4823f255de393518026964b35bb1cea4b4b35f35a42b4f8b
SHA512

b55126137e88ec352c1142caa261e9f43499cfc7b7f15775355d095e40fd0b3d865bfb1190f86a06b00bb40681f256498367affbf0b3a1d38f493bb46a0fff6a
SSDEEP

3072:XOFIm58dVgw8uQrbHzhiqx4qvQ5Ojk+vCqpOV5V8jEn4n7uo80v3wJ2ecs4SFfv8:XOF3SdAuGRiq93jTPpA5VX47twJo7SF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec2d2590be4be0c113d3af652f73f12_JaffaCakes118

Files

0ec2d2590be4be0c113d3af652f73f12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f4429a381a23128cb50a34fa952fd2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputA
ConvertThreadToFiber
SetTimerQueueTimer
SetConsoleTextAttribute
SetProcessPriorityBoost
SetConsoleCursorInfo
SearchPathA
QueryActCtxW
ReleaseMutex
SetThreadContext
CloseHandle

user32

SendMessageA
PtInRect
GetInputState

advapi32

ConvertSecurityDescriptorToStringSecurityDescriptorW
RegQueryValueExW

gdi32

SetBkMode
Ellipse
SelectPalette
GetMetaRgn
GdiTransparentBlt
Arc
ExtSelectClipRgn

msvcrt

_getpid

oleaut32

SafeArrayGetVartype

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ