393b4fefffa4d71122aadd25a29a4fb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393b4fefffa4d71122aadd25a29a4fb2_JaffaCakes118
Size

91KB
MD5

393b4fefffa4d71122aadd25a29a4fb2
SHA1

bf08a006b302b3021158e502aa2d341a7c3bb70a
SHA256

94605b728091ce91b0db37f8709b254208bda03ee9d33691704dee32ac250b9d
SHA512

c80f110aa5ad0474ef7ef8d0bc545660dbc1aac25ef7fcbc13ce6b952db59be4e8c4eba9a032cac4a1116aa0dbf94a0ac97559605b2a0fa1ba922543442accfa
SSDEEP

1536:jbpk9W7UT1KB7g6OTquxZg7OT8wTeH7kTB786yz1BlqM/x:j1k94UT1sSTpxiOT8oebkTB789znlb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393b4fefffa4d71122aadd25a29a4fb2_JaffaCakes118

Files

393b4fefffa4d71122aadd25a29a4fb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84bf02543249e7fec48ef332e005bd51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigA
GetPrivateProfileStructW

user32

DefDlgProcA
GetUserObjectInformationA
GetClassInfoExA
GetDlgItemTextW

gdi32

GetTextExtentPoint32A
RemoveFontResourceExA
DeviceCapabilitiesExA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 413B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ