7353b356f89c98226931bb8e58eeca9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7353b356f89c98226931bb8e58eeca9c_JaffaCakes118
Size

26KB
MD5

7353b356f89c98226931bb8e58eeca9c
SHA1

332d692c5502e4f536b0c1e5e77dcf06d076da09
SHA256

9407c7b058cf21c38787a464cfa10104d5bd4ce050acc7a6c2267538a6aa8bae
SHA512

fd552c9c1578c04ce248c05933aa15f467063f9611afb79f9dd8847f7d38022439ab9794c8d5480b4b56fca3ac0fa88fae00420285939fbda8302e2f6ab1725b
SSDEEP

768:tT5B9q5N+kNhTkYZa2sry9wWXnLdLbhGB:65NrDa2smGWT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7353b356f89c98226931bb8e58eeca9c_JaffaCakes118

Files

7353b356f89c98226931bb8e58eeca9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a7365b9b2132ed50c45a180837fc7f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthA
VerLanguageNameA
GetConsoleCommandHistoryA
SetConsoleInputExeNameA

user32

GetMonitorInfoA
RegisterClipboardFormatA
GetKeyboardLayoutNameA
GetClassLongA

gdi32

RemoveFontResourceExA

Sections

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 429B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ