614f27de6aaca54e1986e4315047378a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

614f27de6aaca54e1986e4315047378a_JaffaCakes118
Size

19KB
MD5

614f27de6aaca54e1986e4315047378a
SHA1

5fcb1fd560fc9796dfc190e43003440bad0527a2
SHA256

69d2d64cdae3fc4e10d01fee4544c50dcd46a3fe2054312a4dc41c51d047af6c
SHA512

f95dff1045592a8d1d757c826d80bfd2b512481af75069ff042513aa35c9775cc43f88b8903fcbc21ed44e93a6ede444aeb336d11f55510107c6e2a5d870a227
SSDEEP

384:daS7d1d93sYve3yufF6sEkF2q/q6ZsD+/oxXhEadYtQyV1A:0S7XOyKKK2qC6kXhEL/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
614f27de6aaca54e1986e4315047378a_JaffaCakes118

Files

614f27de6aaca54e1986e4315047378a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e52bac3407cd40edcfff5e784ac77785

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCtrlHandler
CreateFileMappingW
VirtualAlloc
DisableThreadLibraryCalls
FreeConsole

d3d8

ValidatePixelShader
ValidateVertexShader

tapi32

phoneConfigDialogA
phoneSetData

user32

GetWindow
LoadMenuIndirectW

Exports

Exports

IsScmexfl
ReadXkednwllykq

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ