892946301965343a7955823e6f8272dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

892946301965343a7955823e6f8272dd_JaffaCakes118
Size

6KB
MD5

892946301965343a7955823e6f8272dd
SHA1

d659c324ca59a94594a93728b703e0d46d1740a0
SHA256

f13c802b2ae111c1a78b757f8278c77969f5230813110d48174bb58ce6c18f52
SHA512

95101dd058d13bfbf9f89178e00645a06ab22a7f764ea335bf596adef2049202c6ec8948e42b3a47b443f5aef88e55896077158761828a428aeab21d04d857b8
SSDEEP

96:VM4AyglyjBKpejuFLtqsMp83NWg2rpXc1R5t+RMQNUGl6EnUnaU28C:3Ayggj1OLtqw6MPt+Rj1nUnaUNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
892946301965343a7955823e6f8272dd_JaffaCakes118

Files

892946301965343a7955823e6f8272dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

855eb771749a3bbd82f93d0349c790f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputA
EnumCalendarInfoA
GetDiskFreeSpaceExA
GetPrivateProfileStringW
GlobalAddAtomA
DefineDosDeviceA
GetConsoleCommandHistoryA
GetNamedPipeHandleStateW
GetDiskFreeSpaceExA
WriteProfileSectionA
WriteConsoleInputVDMA
GetModuleFileNameA

user32

GetWindowTextLengthA
LoadCursorA
RegisterWindowMessageA
EnumWindowStationsA
LoadAcceleratorsA
RegisterWindowMessageA
PostMessageW
IMPGetIMEA

gdi32

CreateDCA
EnumFontFamiliesA
PolyTextOutA
CreateICA
CreateScalableFontResourceA

Sections

.code
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ