740150e3aa95e89730237c95a28f1926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

740150e3aa95e89730237c95a28f1926_JaffaCakes118
Size

348KB
MD5

740150e3aa95e89730237c95a28f1926
SHA1

0b0c369ac07934ae7dbb323019d3abf85b3e575f
SHA256

8d704c83d7987ec0286611c20401ddb3b7c88f7d5bdac748b64543f6012ce668
SHA512

0997eb203597bcb3fa64aaca1fde5a4e9730dc93bb801aae1ab7aa782501daaf7cb36982dae68e634f5ec2d6dfbe781b25e6c61dad897897eeb50152866d4758
SSDEEP

6144:QvxeMqgEhBpXO4g98D+IFLHK9MgxRb7o0rcl+gNpIGNw:yVH4gu+I6Mg/b7o0sfn6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
740150e3aa95e89730237c95a28f1926_JaffaCakes118

Files

740150e3aa95e89730237c95a28f1926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20b4521329dff41ddc65911191a3bad8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleDuplicateData
CreateILockBytesOnHGlobal

kernel32

SearchPathW
SetCommState
ReadDirectoryChangesW
OutputDebugStringW
GetPrivateProfileSectionNamesA
GetThreadLocale
FlushConsoleInputBuffer
GetTempFileNameA
WriteConsoleOutputCharacterA
SetThreadPriority
VirtualProtect
InterlockedDecrement

user32

ActivateKeyboardLayout
ValidateRect
SetMessageQueue
IsWindowVisible
MapVirtualKeyA
AdjustWindowRectEx
SetMenuItemInfoW
SetScrollRange
SetWindowsHookExW
ReplyMessage
UpdateWindow
RegisterClassA
GetClassLongA
DrawTextW

Sections

.text
Size: 38KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ