24c466b26d5d9efc7f955ed334c55e0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24c466b26d5d9efc7f955ed334c55e0f_JaffaCakes118
Size

88KB
MD5

24c466b26d5d9efc7f955ed334c55e0f
SHA1

db96afaf3475b151e8ac096be17f04c3d186b7f6
SHA256

097d28eb6b2e48a0b39878a6e5fc032599357f71eae6806f651380f5b3874ab4
SHA512

92b3ec5a97906e788c8b526d2263d7929b3a6162276221d33ad16ff946f0be563b876bff311aaefee3e7091026e0d9ff7dd3e7940cace1aae59bb8d3468aacce
SSDEEP

1536:1c67YjDz6c0MNA5As5+NIFwO32tG88HhxGSXsYXSnFtf:v0n/0MjeM+3vjGyMnFtf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c466b26d5d9efc7f955ed334c55e0f_JaffaCakes118

Files

24c466b26d5d9efc7f955ed334c55e0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acfc737588fdec8fa45a8ac2c6f3f25a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GenerateConsoleCtrlEvent
GetConsoleWindow
VirtualAlloc

user32

GetWindow
OemKeyScan

d3d8

ValidatePixelShader
ValidateVertexShader

tapi32

phoneSetHookSwitch
phoneConfigDialogA

Exports

Exports

Nbgwswlah
EndLsrtlkbn

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ