4343de03a53234778e854cee7559dac7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4343de03a53234778e854cee7559dac7_JaffaCakes118
Size

67KB
MD5

4343de03a53234778e854cee7559dac7
SHA1

1de16ebc3671c00e53a6389d509ae00568f45e72
SHA256

e0ba028f2b74e1df48e8d03f322906ccf3d3dbc7ee3aaee1a702aaf022afc47d
SHA512

676e76acda56a7719b032bff03cf68968a8f51c5ff7620cad19458548ffe6af9fe345c814f70d3be34b27a20ef5201c33ec82782a9d101c6dd07bd303af28b94
SSDEEP

1536:gzuHfNWXC/rsWCDa7y0FuGpCuAnIPMj2yIfQM2ULQ:gzuHfNYC/rsWCDynlYusEw2UU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4343de03a53234778e854cee7559dac7_JaffaCakes118

Files

4343de03a53234778e854cee7559dac7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd06e43528d647247f292472467e1664

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkW
GetLongPathNameW
CreateMailslotA
GetCurrentConsoleFont
SetEvent
GetNumaNodeProcessorMask
GetVersionExA
SetProcessShutdownParameters
SetComPlusPackageInstallStatus
GetNumberFormatW

user32

CheckRadioButton
FindWindowExW
GetClassNameA
SetWinEventHook
GetNextDlgGroupItem
GetAltTabInfoA
IsDialogMessageA
GetClipboardViewer
SetMenuItemInfoA
EndDialog
GetSysColorBrush

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE