68863f70c984ba5901b73e1cb34a5a6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68863f70c984ba5901b73e1cb34a5a6f_JaffaCakes118
Size

16KB
MD5

68863f70c984ba5901b73e1cb34a5a6f
SHA1

29c5422a34e211a61d7c54336bc5ef5a7eb8f4a5
SHA256

1836254d12a75b8601666eec58e35ed9f50dc08315593b12843da0f18cb9a60b
SHA512

2f4eb88f22e1ee966b4d35c3e5e34f5b1de72a56b29162f9bf08d820144bb33ea9994a0ab53ce5a62cd1e759820594c5c4247a3b10faf32c86f9e5e42945c8a8
SSDEEP

384:HNM9bd0nSFWUYjfQlzbYUQKKGtbxiEJJjZw:Huhd0SF5qsq3Kx9DZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68863f70c984ba5901b73e1cb34a5a6f_JaffaCakes118

Files

68863f70c984ba5901b73e1cb34a5a6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b85fcefb542d19fac2d86d291a4aeffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
GetSystemRegistryQuota
GetCurrentThreadId
LoadLibraryExW
GetFileSizeEx
VirtualAlloc
CloseHandle
HeapSize
GetWindowsDirectoryA
SearchPathA
VirtualAllocEx
GetPrivateProfileIntA
GetDevicePowerState
GetEnvironmentVariableA
WaitCommEvent
SetFileAttributesW
SetFilePointer
GetProcessHeaps
WriteConsoleInputA
QueryPerformanceCounter
FindNextFileA
CreateSemaphoreA

user32

DrawIcon
DefDlgProcA
RegisterClassExA
RegisterClassA
GetKeyboardLayout
TileWindows
GetAppCompatFlags
PostQuitMessage
GetUserObjectInformationA
IsChild
AppendMenuA
CloseDesktop
ChangeDisplaySettingsExA
IsDlgButtonChecked

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ