6472775484ca9366e4db67a07e0ffff9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6472775484ca9366e4db67a07e0ffff9_JaffaCakes118
Size

10KB
MD5

6472775484ca9366e4db67a07e0ffff9
SHA1

e28fbd1e0c4f0b5c30523dab58b59068f870ba13
SHA256

b41fe1c769b6000a79dcd47a2bcf95edee32d8a974ee9dba61f2d14d05e0c5cb
SHA512

c16b22aea6c605052e44691e4956cdab693ceb1c416d8e53038a6f100070fc11a4688efac16f1d27d99764e0c87170cd2aee672246bab9a6b8918974c592276c
SSDEEP

192:m3mN4efLt9BlabGZcojGtNK6QsJDhaWP+BIXFuS0fxeP3TmBB:m26QL36XojsNK6QsJDvLudfxuqBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6472775484ca9366e4db67a07e0ffff9_JaffaCakes118

Files

6472775484ca9366e4db67a07e0ffff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f9fb66c4515665b0ab7d2ef9f87b099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
CharLowerW
DrawTextW
ShowWindowAsync
DragObject
GetAltTabInfo

kernel32

GetLastError
VirtualProtect
GlobalAddAtomW
WriteConsoleOutputCharacterA
HeapReAlloc
PostQueuedCompletionStatus
GetConsoleAliasesLengthA

gdi32

TextOutA
RestoreDC
GdiEntry12
SetMetaFileBitsEx
SetBrushAttributes

Sections

.text
Size: 3KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE