217133608c034a74a74bf3c874c9a110_JaffaCakes118 | Triage

Sharing

General

Target

217133608c034a74a74bf3c874c9a110_JaffaCakes118
Size

1.0MB
MD5

217133608c034a74a74bf3c874c9a110
SHA1

8ebc1907e38b2016802246e7528db6ce2b06e02d
SHA256

1c355669da81585afa9d76fa187d46a76fdeea3b8e76c221c799ca3b83c1dcb4
SHA512

aa07e7e53f8a4cde6240d49a63647a3ecbe18a9b397801de09af5823a1cc843f564c53e3921d9c974bb99530262c491e35059eb8245f6ad6b09c29c6e2fb9abf
SSDEEP

24576:eSNlDlT4xL2qSVJIOZYp+828FoB1fEGkrki:enKTVxxKW1fJkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
217133608c034a74a74bf3c874c9a110_JaffaCakes118

Files

217133608c034a74a74bf3c874c9a110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d8111dd93fb164308c0da2d93d77bb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetDriveTypeA
GetProcessPriorityBoost
VirtualFree
GetConsoleCursorMode
CallNamedPipeA
VirtualAlloc
GetLastError
ExitThread
SetHandleInformation
GetProfileSectionW
GetCompressedFileSizeA
GetProcessId
IsBadReadPtr

user32

SetWindowsHookA
OemToCharA
ExcludeUpdateRgn
NotifyWinEvent
IsDialogMessageA
EnableMenuItem
IsWindow
ArrangeIconicWindows
LoadMenuIndirectA
SendNotifyMessageA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 996KB - Virtual size: 2.3MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ