468e8eec266f844a164c7c43c2b4ba7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

468e8eec266f844a164c7c43c2b4ba7b_JaffaCakes118
Size

24KB
MD5

468e8eec266f844a164c7c43c2b4ba7b
SHA1

23154e748b9613aeb279a1ecae64ee4e833b9f92
SHA256

6abec26fa7614820e6841dda5f08bee1d649e63a0cf3298f722aaeb2b3fcf5eb
SHA512

4739499496b810d4cd59f7ad8cc8a2be05cdbfce9bc3e1d3fda6c7bbdf8a71600a9e64d65aaeb44f7add64d17575d8522d18cd88873ba07c81cc41313d8f09d5
SSDEEP

384:TZ8y5X5FtmjFMautrkBk6hOSI17rFHegyB4ULUaXF6jzUvxb3Vs/1IOzYA4Y:z1mj6aOMk6TK7rgB3V6jz+bVaIOoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
468e8eec266f844a164c7c43c2b4ba7b_JaffaCakes118

Files

468e8eec266f844a164c7c43c2b4ba7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6df9d00695719a67d9fe9e941d6d745b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionW
ReadConsoleOutputA

user32

SendMessageTimeoutW
DialogBoxParamW
OemToCharW

gdi32

EnumFontFamiliesA
EnumICMProfilesW
GetTextExtentPoint32A
PolyTextOutA

Sections

.text
Size: - Virtual size: 123KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ