6a2bc9dcb5dce6111db2c148fab8fb33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a2bc9dcb5dce6111db2c148fab8fb33_JaffaCakes118
Size

24KB
MD5

6a2bc9dcb5dce6111db2c148fab8fb33
SHA1

c964e317f93c88a2b3b79d875c268ee5b013b2c3
SHA256

f44cc1eba8363bc73ee178ee978224cf9f82ea8584bf8fd06ab2668a6ece3109
SHA512

7ce3fe844ba40d95c95e4418b381d416a867b7ad65b564a198497eeff75f3a3ac9c3a18dcd07aef3bad8cf68e2a502844611aa8d71bbec2a3759237bee88bf49
SSDEEP

768:ilcqmYkWX6NC/8DYNpA7Y6iob+oHPghW/CUm:0cqmzq+C74sopgUm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a2bc9dcb5dce6111db2c148fab8fb33_JaffaCakes118

Files

6a2bc9dcb5dce6111db2c148fab8fb33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c6c064d8e4c630450259ab77a475af9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GetLogicalDriveStringsW
GetThreadSelectorEntry
BaseCleanupAppcompatCache
GetFirmwareEnvironmentVariableA
GetCommConfig
GetHandleInformation
EnumResourceLanguagesW
SetVolumeMountPointW
EndUpdateResourceW
GetCompressedFileSizeA
GlobalHandle
WriteConsoleOutputCharacterA
EnumLanguageGroupLocalesW
DuplicateConsoleHandle

user32

FindWindowW
LoadStringW
MBToWCSEx
GetWindowLongW
GetQueueStatus
RegisterTasklist
GetAltTabInfo
MessageBoxTimeoutA
GetLastInputInfo
ReleaseCapture
BroadcastSystemMessageExA
CheckRadioButton
GetDlgItem
MessageBoxW

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ