69d7d8020ce2172d00c3ade5191f897b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d7d8020ce2172d00c3ade5191f897b_JaffaCakes118
Size

156KB
MD5

69d7d8020ce2172d00c3ade5191f897b
SHA1

4ca96b1cb6c9ab73e52a9cd119b51c99be9d35b2
SHA256

21f713cd9acc8a72bf49c8b74f27bbf2ca35d8d9dab9453b2c3225c4cf5787d6
SHA512

c802d1678a87e8b0f930d8dce3b6c6cd71ec8c1ddd3671824ed5a46435fe7cc8f06187b94d0d142c49a132c168a0756974238fb961022e3a28d728773e500e26
SSDEEP

3072:Qroi0KFMhKCOgMfxYiQU6OaNd8lPLHsKNmhJW:QqCMZy28ar8lPEJW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d7d8020ce2172d00c3ade5191f897b_JaffaCakes118

Files

69d7d8020ce2172d00c3ade5191f897b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4640487c4fb7ebdf1430fc2753045780

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputAttribute
GetDateFormatW
GetLogicalDrives
GetPrivateProfileStringA
EnumTimeFormatsW
ReadConsoleA
SetCommMask
LocalUnlock
FindFirstChangeNotificationA
GetThreadLocale

user32

CloseWindow
AdjustWindowRectEx
CreateIconFromResourceEx
GetClipboardOwner
DrawTextA
LookupIconIdFromDirectoryEx
SetWindowRgn
DdeUnaccessData
SetCursorPos

gdi32

GetCharABCWidthsW
GetClipBox
GetTextCharacterExtra
GetCharABCWidthsFloatW
GetCharWidth32W
ExtSelectClipRgn
SetICMMode
GetBitmapBits

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE