165c13bdf0fba94e9b6dd3370b51f507_JaffaCakes118 | Triage

Sharing

General

Target

165c13bdf0fba94e9b6dd3370b51f507_JaffaCakes118
Size

56KB
MD5

165c13bdf0fba94e9b6dd3370b51f507
SHA1

8bdc3f34591db3bcd1e85fef94090cb76ef11568
SHA256

12187ae7843804034c9bbc80e38d242c1adacfbfedad10ee636cd5f05eefbe9f
SHA512

55f78ebe68e5704615be12640df775dc516553ebe718b34b23cdb2beda48b227f048270f3932f24f87a9e0da0a6b80ebceef5dca0e6c51f9d345f9387443e1b7
SSDEEP

1536:JN57BB0YaaqJeztVLdYd2bRDERmQkq/k1ew/Yzk/T:JNNBB/2JeBZ1EkNq/k1eNk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165c13bdf0fba94e9b6dd3370b51f507_JaffaCakes118

Files

165c13bdf0fba94e9b6dd3370b51f507_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c72d2f121fc0e1d41cbf1c632467de65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeW
GetDiskFreeSpaceW
AddConsoleAliasA
GetConsoleTitleW
lstrcmp
OpenJobObjectA
SetConsoleCP
GetNumberFormatW
lstrcatW
DeleteAtom
GetStringTypeA
ResumeThread
FileTimeToLocalFileTime
RtlUnwind
GlobalAddAtomW
FreeUserPhysicalPages
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

SendMessageW
IsRectEmpty
GetAsyncKeyState
EnumClipboardFormats
EndDialog
GetMenuCheckMarkDimensions
CreatePopupMenu
GetIconInfo
GetUpdateRect
AllowSetForegroundWindow
SetScrollInfo
IsDialogMessage
GrayStringA
SetCursor
ChangeClipboardChain

Sections

.text
Size: 5KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE