84db975d3dc31d4a6a6e04e2daabe5bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84db975d3dc31d4a6a6e04e2daabe5bd_JaffaCakes118
Size

13KB
MD5

84db975d3dc31d4a6a6e04e2daabe5bd
SHA1

d016b00bf4158ffd0262615586874ee6f9b22a08
SHA256

cf3e811ab5aa5ac4426c9da34bc8eb53cfcafbb63cbe636f129d6985accfebeb
SHA512

39036e85221f2bba738883d845e27002a9e48b7d6f05d53d8fcc41fa7dc29016cf76e1f6ac35191f8639cc1c3a961dbc75440c0b9f0f9bbce047276cf132355f
SSDEEP

192:yvNsFy0uQn7y6MPR3Ao9GPrB/rDY5YtiUlsNyhsXEliuYX0d6mR0Jvb0ADKY0WSk:yC7JcAVrZYKlMosXoiE6mR8D7DKMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84db975d3dc31d4a6a6e04e2daabe5bd_JaffaCakes118

Files

84db975d3dc31d4a6a6e04e2daabe5bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51491cc12487d993f3d2d7087f66b693

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
CreateHardLinkA
FindResourceExW
LCMapStringA
BuildCommDCBAndTimeoutsA
GetProfileStringA
lstrcpynA

user32

GetMenuStringA
DefFrameProcA
TranslateAcceleratorA
SystemParametersInfoW
GetClassInfoExA
DlgDirSelectExA

gdi32

GetCharABCWidthsA
RemoveFontResourceW
GetKerningPairsW

Sections

.tls
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ