86b00ddc331bb3171f7e11c2ed9f3cfd_JaffaCakes118 | Triage

Sharing

General

Target

86b00ddc331bb3171f7e11c2ed9f3cfd_JaffaCakes118
Size

21KB
MD5

86b00ddc331bb3171f7e11c2ed9f3cfd
SHA1

26d92128ad4d221640ddbb87118956a99ef0bd26
SHA256

66c21ae2b7846ec8d5795cf9d7ed97ec81d05f4d571a53681237f3ea754c0894
SHA512

85b60b1d3cc588ad8ed3fc3924ffbb4d3d8d3d2a7bd609d66f8575e6c76c2f57f517fd170f5ade3127621be3264664078772785601490bbee9be1e24fa57947b
SSDEEP

384:/0rU0p8NtycThD8sasa6LO6oVeiDq1kTiDnV+QG840fV8w:0U0nocsX5t1kTi7V+v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86b00ddc331bb3171f7e11c2ed9f3cfd_JaffaCakes118

Files

86b00ddc331bb3171f7e11c2ed9f3cfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5431b410f5fb3264d60ca4a52849b4b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetConsoleAliasExesLengthA
GetFileAttributesA
GetDiskFreeSpaceA
WritePrivateProfileSectionA

user32

SetWindowsHookA
DlgDirSelectExA
SendMessageTimeoutW
GetPropA
SetWindowsHookExA
CallWindowProcA
IsCharAlphaNumericW
MessageBoxIndirectA
IMPGetIMEA

gdi32

CreateColorSpaceW
GetGlyphIndicesA
CreateFontA
GetTextExtentExPointA

Sections

.fasm
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 637B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ