824459da7b224b2d46b695a676e35c10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

824459da7b224b2d46b695a676e35c10_JaffaCakes118
Size

87KB
MD5

824459da7b224b2d46b695a676e35c10
SHA1

84b1696513a8a7cbf6530962624555601ebfa54a
SHA256

52d7f88eef8e66b9da58029e72816890227bb63f05e451fb202cb94baead2c92
SHA512

7d4a597d5d1ccbadd04458d1259ff3ad938119014ea1bc3c3d1590a2aaec83b96686a494e75a38dfe38cf8125271392fb8ae534644ba7d1a307895f43b1b5b06
SSDEEP

1536:jWGK7ZModoiXjcqMAutduWxLS9LStEwP1Luxea3938hy8CGCkc3TC/r0q2rFTQeV:yGK7ZMYzCAuS6u9Mx9uxf93h+6ErN2pz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
824459da7b224b2d46b695a676e35c10_JaffaCakes118

Files

824459da7b224b2d46b695a676e35c10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a00b8df249c08ec4d8625f068c6e43fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddConsoleAliasA
HeapAlloc
HeapCreate
AreFileApisANSI

user32

CharNextA
GetAsyncKeyState
GetDesktopWindow

shlwapi

StrSpnA
StrStrA

gdi32

GetTextAlign
GetDeviceCaps

shell32

DragFinish
ord64

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ