699933b74560f5faa8a5db6134b25162_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

699933b74560f5faa8a5db6134b25162_JaffaCakes118
Size

10KB
MD5

699933b74560f5faa8a5db6134b25162
SHA1

5f13b137422f9a240f8bc36aefb3e21ba035f527
SHA256

e095a35abce162cbd5b805550fcb0e513d6c6a857dd92d720dcdf56e6931096a
SHA512

841d28bf0e5aaf176cd0c5a5633f1083b2bd794f97f247f480c388630f257dbdf939fe1178c4e1cb6c34d9ecb6514351dbdf95f515260f3977f19b8bff5c8f1e
SSDEEP

192:x7zPD2syvB851HQ69J9kfFq7/iyVVVCn7SczyYYYi:BLDVyJKhktyNCmcGYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
699933b74560f5faa8a5db6134b25162_JaffaCakes118

Files

699933b74560f5faa8a5db6134b25162_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d647701131bec6d8d8321864cce83565

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputA
SearchPathA
GetConsoleCommandHistoryLengthA
IsBadStringPtrA
SetConsoleTitleA
EnumCalendarInfoA
SetFileAttributesW
lstrcpynA

user32

LoadCursorA
VkKeyScanA
PostThreadMessageW
LoadImageA
wsprintfA

gdi32

CreateColorSpaceW
GetICMProfileA
EnumFontsA
TextOutA
GetCharWidthA

Sections

.fasm
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 593B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ