699b2486ca4ad9113e60219f469a9b61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

699b2486ca4ad9113e60219f469a9b61_JaffaCakes118
Size

9KB
MD5

699b2486ca4ad9113e60219f469a9b61
SHA1

4ec5b0701b8281fd5e58a7e32f2fd1ceef2fb64a
SHA256

b8597e83c0f42904b40afdfb2ebc36305149641a44ccfd90c15bc9c880a07d1f
SHA512

25480b59b24b4a3f4518fd51c1cae1e39d7a64804dff015f1cbbf18d1e91b9d268ea5b194d00240605dc2d9ee7188bf24d95018ed28e30a697e9bf2f3539ea05
SSDEEP

192:XnPvDxgDTmaEuV6O9wxwZQoT2//bR7UJLqPm+U62Rin1G:XPbRm6O9tpTsDNcLqPTUdWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
699b2486ca4ad9113e60219f469a9b61_JaffaCakes118

Files

699b2486ca4ad9113e60219f469a9b61_JaffaCakes118
.exe windows:5 windows x86 arch:x86

27668252d2c66777b6e4fe39eaf4fadc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
SetConsoleCursorInfo
GetConsoleCursorInfo
CompareFileTime
OpenWaitableTimerA
UnregisterWait
GetDiskFreeSpaceExA
GetLastError
GetProcessTimes
GetProfileStringA
VirtualAllocEx
SetFileAttributesA
GlobalSize
LZCopy
OpenThread
DisconnectNamedPipe
PeekConsoleInputA
EnumTimeFormatsA

user32

SetProcessWindowStation
LoadMenuA
RegisterShellHookWindow
SendMessageCallbackA
LoadStringA
SwitchDesktop
MessageBeep
SetShellWindow
DrawTextA
PackDDElParam
IsChild
CloseWindowStation
GetWindowInfo
EnumDisplayDevicesA
SetActiveWindow
DispatchMessageA
GetDesktopWindow
ModifyMenuA
ExcludeUpdateRgn

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ