6f39e75a4088fe834970892c81bfa9a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f39e75a4088fe834970892c81bfa9a2_JaffaCakes118
Size

27KB
MD5

6f39e75a4088fe834970892c81bfa9a2
SHA1

c18b6a3e5d831a578a7ff49204367527f4b82371
SHA256

bb50c0373f8c502cccd5155625ae6e91046f9004681bf567fdfad7f8eb998659
SHA512

ea7962e63107135f85eadf961c0dc4e07646e2a7d95ce236a803a5d2c74aa9338a13a78f41a9254f6f7bc3326f2180f1037d77faa0d912c69b6050f3c3ad5eef
SSDEEP

768:9EQ/0B3D7DvtPX8AEa/WG+DXpD9XpOpcTxVLqH1KPO:H0B3D7Dvt0I/W9D5D9Z+a/WH1KPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f39e75a4088fe834970892c81bfa9a2_JaffaCakes118

Files

6f39e75a4088fe834970892c81bfa9a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cdb6527ebcbe159a52b5266e61cfcd0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetFocus
GetWindowLongA
PackDDElParam
MenuItemFromPoint
GetParent
EnumPropsW
InSendMessage

gdi32

WidenPath
EngCreateSemaphore
GetClipBox
GdiEntry13

kernel32

VirtualProtect
GetStartupInfoA
WriteConsoleInputW
ExitProcess

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE