6ab8134844f902c7b0f1dba7887ee7d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab8134844f902c7b0f1dba7887ee7d4_JaffaCakes118
Size

26KB
MD5

6ab8134844f902c7b0f1dba7887ee7d4
SHA1

0f3330bc5e6bbff341166d0920fb76f7aafa331e
SHA256

eba345f9248652d3e79b6cdbaea5bd4a9dc10070297cebdbcee8596ce7cefeac
SHA512

4408c178a27c4671889663df4e2bd036a4a38a55cef7c4782f2ab866e7ef858687f8768cb9496b01f0725ee30332ae6211d17309223f59a9e6b99d2c55b5efd4
SSDEEP

768:C2Pgw1X7ZgjsQuU/f+UpEEPbWR02xR/I5X:C2PhFSw5U/f+kEECRNxR/4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab8134844f902c7b0f1dba7887ee7d4_JaffaCakes118

Files

6ab8134844f902c7b0f1dba7887ee7d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93fea0783c0598b5c734dccaba63119e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
CheckDlgButton
KillTimer
IsZoomed
IsIconic
GetWindowThreadProcessId
SendMessageTimeoutW
SetClipboardData
DestroyIcon
SendMessageW
RegisterWindowMessageW

ole32

CoTaskMemFree
CoRevokeClassObject
CoTaskMemAlloc
CoReleaseServerProcess
CoMarshalHresult
OleCreateEx
OleCreateLink
CoTreatAsClass
CoUninitialize
OleDraw

kernel32

GetComputerNameA
IsBadStringPtrW
ReadConsoleOutputCharacterW
VerLanguageNameW
UnmapViewOfFile
TlsSetValue
GetVDMCurrentDirectories
LoadLibraryExW
SystemTimeToFileTime
IsDBCSLeadByte
WriteConsoleOutputW

ulib

?RemoveNode@SYSTEM@@SGEPAPAVFSNODE@@E@Z
?Initialize@CONT_MEM@@QAEEPAXK@Z
??0BSTRING@@IAE@XZ
?FillAndReadByte@BYTE_STREAM@@AAEEPAE@Z
?DeleteAllMembers@SORTED_LIST@@UAEEXZ
?Construct@OBJECT@@IAEXXZ
?AppendString@PATH@@QAEEPBVWSTRING@@@Z
?Stricmp@WSTRING@@QBEJPBV1@K@Z
?Compare@OBJECT@@UBEJPBV1@@Z

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ