38fb6da5d4fc709dcf3316aaf0a51aae_JaffaCakes118 | Triage

Sharing

General

Target

38fb6da5d4fc709dcf3316aaf0a51aae_JaffaCakes118
Size

28KB
MD5

38fb6da5d4fc709dcf3316aaf0a51aae
SHA1

348676953bda29305cfc4d19fe2601a33677f3f0
SHA256

c61497c55d9eea417cc2f9a535e54a081c290c40de665241e964d2bff6412399
SHA512

47e22ff8e8241f05aa08499426a49bc6ddb2c84c5a11148e0739a65fa149ac4bd97a50121399b90f17b1eeb290d902f5bbcc5eab711e31c0893e9e9786eecd18
SSDEEP

384:NwJxaT/Loo7tidgnajZgRLfBVb10I951IlDFludQR0q9xwFmB6gqXpHFQ9q:NwTNQidgajZsN70iuplb0Fmfskq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38fb6da5d4fc709dcf3316aaf0a51aae_JaffaCakes118

Files

38fb6da5d4fc709dcf3316aaf0a51aae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0d90d09e5933e0bd1435a6b6511d58d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetScrollInfo
SendIMEMessageExA
UserRealizePalette
DeregisterShellHookWindow
RegisterClassW
WINNLSEnableIME
DrawStateW
CtxInitUser32

ole32

CoInitializeWOW
CoIsOle1Class
RevokeDragDrop
CoTaskMemFree
CoDisableCallCancellation

kernel32

VirtualProtect
ExitProcess
RegisterConsoleVDM
GetCommandLineA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE