1686fb928c87be8a32d60752058e98e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1686fb928c87be8a32d60752058e98e0_JaffaCakes118
Size

77KB
MD5

1686fb928c87be8a32d60752058e98e0
SHA1

34aa1eafdd1ad83dea4228f5efbf11d0232a3536
SHA256

730e8a5b8488d07b15c578bdc91158d48f63a24edb04b5916a02c0a06ec07c21
SHA512

995a0909f976c7064ff93179c0777c44bbd78c8dabd944ed24fd018ba4a9e079a2d5e44507ce181bda7bf750c8eb7b47e879d087f7fc4a836fda697a777f2bab
SSDEEP

1536:j6yuxqeixx/ennrtu5xGf2DkWEuQC2b18BRbSXgqEE3iaxZxp:epqee25u5EuDzs1ubIJ3iaxZxp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1686fb928c87be8a32d60752058e98e0_JaffaCakes118

Files

1686fb928c87be8a32d60752058e98e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec4ce00c98a143ba68e958740c980eda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenDataFile
DosPathToSessionPathW
SetConsoleScreenBufferSize
VerLanguageNameW
SetCPGlobal
GetLongPathNameW
GetBinaryType
SetConsoleMenuClose
InterlockedIncrement
GetSystemDefaultLCID
ReleaseActCtx
CommConfigDialogW
SetNamedPipeHandleState
DefineDosDeviceW
GetVolumePathNamesForVolumeNameA

user32

ToUnicode
SetActiveWindow
DdeKeepStringHandle
CreateCursor
MenuWindowProcA
DrawAnimatedRects
MessageBoxTimeoutA
IsIconic
GetAltTabInfoW
GetDlgItemTextW
MapVirtualKeyExA

Sections

.text
Size: 73KB - Virtual size: 92KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ