296617ad8d8119a1f07eefb7be8fab8c_JaffaCakes118 | Triage

Sharing

General

Target

296617ad8d8119a1f07eefb7be8fab8c_JaffaCakes118
Size

244KB
MD5

296617ad8d8119a1f07eefb7be8fab8c
SHA1

bb532aeac6a5f9145a5a642df6e98425036c5719
SHA256

6b5d2bc4ad0252ea567acc2b088144979861f93239bfaf26f326e2dc13938302
SHA512

6d117100535e71bbab1a3c40da26e82e8c30b30182339245734d9cc02f7294ce0a91ee4af6f155de557cc663d9c8863647d57a783e21c5192a98642ffa1a056f
SSDEEP

3072:0CswId1xKr+z1lwrHFMJMg38Uf1d0CtP84EYnmegxyM7cRvFI6eOIs5qDV0qRnV1:Vy+U1wMrNndP8XyWcomBq57RkqAina+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296617ad8d8119a1f07eefb7be8fab8c_JaffaCakes118

Files

296617ad8d8119a1f07eefb7be8fab8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71995bda3348129b6dbfd964e8582bf1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
GetUserDefaultLCID
CreateEventA
GetModuleHandleA
DefineDosDeviceW
ReadConsoleOutputAttribute
ReadConsoleW
OpenFile
MultiByteToWideChar

user32

SetMessageQueue
GetCapture
MapVirtualKeyW
SetRectEmpty
CreateDialogIndirectParamW
DrawAnimatedRects
SetClassLongW
GetKeyNameTextW
BeginDeferWindowPos
SwapMouseButton
GetForegroundWindow
ScreenToClient

gdi32

CreatePalette
InvertRgn
GetClipRgn
LineTo
CreateBrushIndirect
CreateColorSpaceW

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE