19600eb2149df73479dc96d546396b95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19600eb2149df73479dc96d546396b95_JaffaCakes118
Size

20KB
MD5

19600eb2149df73479dc96d546396b95
SHA1

1cf391093165952e20ed562aa039005140084709
SHA256

74eb4db1268abda93db01e544e079d19456e43d44e19c42f241e2bebb0d2248e
SHA512

0049eb2a165af3c44eebf146c8142890dc1233069949a62ef3342a43975f6596313fba2b9d2c8acb5615298150001113b225512eaf2de903289d7aed92de0de3
SSDEEP

384:Tb7A2fxUi7nbC6ifGL/qQmQj0vkbteTgt9SqbJS21c386:X7fx7r4GL/qQmGIkITgHfJH1c3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19600eb2149df73479dc96d546396b95_JaffaCakes118

Files

19600eb2149df73479dc96d546396b95_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c3052cd12e988a2649e5be986d54bfa9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
GlobalDeleteAtom
UnregisterWaitEx
GetVolumeNameForVolumeMountPointA
LZSeek
VirtualAllocEx
DebugBreak
GetFileAttributesA
GlobalFlags
SetFileAttributesW
CreateSemaphoreA
lstrlenA
CloseHandle
OpenEventA

user32

LoadKeyboardLayoutEx
UnhookWindowsHookEx
GetTaskmanWindow
CreateSystemThreads
CreateWindowExA
CharNextExA
IntersectRect
LoadStringA
ModifyMenuA
GetForegroundWindow
MonitorFromRect
RegisterClassA
RegisterClassExA
IsMenu
EqualRect
IsWindow

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ