7033a1c6dee38a3f4ce13cef0291ebbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7033a1c6dee38a3f4ce13cef0291ebbf_JaffaCakes118
Size

178KB
MD5

7033a1c6dee38a3f4ce13cef0291ebbf
SHA1

0b0c000bbccc443a87be0e3b1a725e21ae1f094d
SHA256

2e6f979ba318b514acbb4696a1979fb909be189ba4904de7c77e9be0cc94cb57
SHA512

a5f7bc10f52351fd717a25e7eefa9f1f979df1d10d405038e37487c5c705bc04a95f9cdd2260c2faa976c63b1efde5abad2fed2353bc7cc10646ba61fb8b46b0
SSDEEP

3072:dyu1STX+rqKNOI4z0H2/A3evpCqPq4ksQryp4gCkHYto13JMIW:dfSSpOfIH24wCqPq4kZ2p4gCawy5MIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7033a1c6dee38a3f4ce13cef0291ebbf_JaffaCakes118

Files

7033a1c6dee38a3f4ce13cef0291ebbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab751cc3733c5376dfcda08116e6a668

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalCompact
ReadConsoleOutputAttribute
UnregisterConsoleIME
GetConsoleTitleW
ConvertDefaultLocale
GetVolumeInformationW
UTRegister
GetConsoleAliasesLengthW
RegisterConsoleVDM
FindFirstChangeNotificationA
DosPathToSessionPathW
FormatMessageW
GetUserDefaultLangID
GetDefaultCommConfigW

user32

GetDoubleClickTime
DragDetect
FlashWindowEx
DrawFocusRect
GetKeyState
GetScrollBarInfo

Sections

.text
Size: 9KB - Virtual size: 793KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ