698284d1600f14625fb4ce3c5b271ff2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

698284d1600f14625fb4ce3c5b271ff2_JaffaCakes118
Size

3KB
MD5

698284d1600f14625fb4ce3c5b271ff2
SHA1

baf4a81bead9f94215a24af559c53c24c21be41b
SHA256

ca18f3ca3da0b7570d11a1c30912d6e138bf6d2251a40e36e58ec260426e804e
SHA512

32d878c25894a1a278aaaffdd53d498bf054008dc52a542ee4eac6e920eafcee296154669a03f5bc17968b3252b7e58892612564f296df9e7176cee5dccef969

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
698284d1600f14625fb4ce3c5b271ff2_JaffaCakes118

Files

698284d1600f14625fb4ce3c5b271ff2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

591a1772f73ccd8ddda8f669ac5ad612

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
lstrcpyA
FindFirstFileW
GetCurrentThread
GetThreadTimes
GetCurrentThreadId
GetCurrentProcessId
GetCompressedFileSizeA
SetEnvironmentVariableA
GetSystemTime
GetCurrentProcess
LoadLibraryA
VirtualAlloc
WaitForSingleObject
CreateEventA
GetProcAddress
IsBadReadPtr
VirtualProtectEx
VirtualFree
GetModuleHandleA
Sleep
SystemTimeToFileTime

user32

ShowCaret
GetWindowTextLengthA
GetMessagePos
DestroyWindow
BringWindowToTop
GetKeyboardLayout
GetClipboardOwner
GetCaretBlinkTime
IsWindowVisible
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
MessageBoxA
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ