2954d851e4982131bdfa8d949eb9c2be_JaffaCakes118 | Triage

Sharing

General

Target

2954d851e4982131bdfa8d949eb9c2be_JaffaCakes118
Size

10KB
MD5

2954d851e4982131bdfa8d949eb9c2be
SHA1

cf448ca8838fcfefbff09626f16727e16457f0c5
SHA256

2ca42b9830e61f773edfde53dc51aa8bb70eafdb9194115eead644761739b722
SHA512

a0f648c9924699d840c93207bd6c65e75044ae80147b78b2cba63446dd8fe7a2e7be36b86d49bc11927e5d89391bfd38a569f02c0355e68d2172577a7d6b8191
SSDEEP

192:G6fHBaPDI/ds6TZR8qmbt5EJ6Flae79aPcoh1JTfID:G6Qgs6sqmbXEylB9aPR11ID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2954d851e4982131bdfa8d949eb9c2be_JaffaCakes118

Files

2954d851e4982131bdfa8d949eb9c2be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

698789c91be222449c18921669720415

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
CreateCursor
EnumWindowStationsA
DdeCreateDataHandle
ScrollChildren
GetMessagePos

kernel32

GetLastError
VirtualProtect
GetConsoleAliasExesLengthA
_hread
FileTimeToDosDateTime
InitializeCriticalSectionAndSpinCount
GetTapeStatus

gdi32

CancelDC
SwapBuffers
PATHOBJ_bEnumClipLines
GdiStartDocEMF
DdEntry44

Sections

.text
Size: 3KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE