95aa96dd8c168c5f6a048bf41a15a401_JaffaCakes118 | Triage

Sharing

General

Target

95aa96dd8c168c5f6a048bf41a15a401_JaffaCakes118
Size

240KB
MD5

95aa96dd8c168c5f6a048bf41a15a401
SHA1

076c913ad0e985960cf0097534d4b1850d4af325
SHA256

830b88ad73b7a2ebaf66c624438d9af34244bac0baeb7d2c6a8c41ccc0d4d654
SHA512

d5906e04e86b5fc06cd9b07b6a1b91ff67e0651baa6fd33a219e272f7d6c20c6bc0bd33e3c7b2d43fdf486059f3fc50cf57add2e46ad028f7c20e5939342f8e3
SSDEEP

6144:SaU0aVdHI4yoOqXevlR9nG12gDfMZl/nO:XVaVdoCOqX4lRSsVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95aa96dd8c168c5f6a048bf41a15a401_JaffaCakes118

Files

95aa96dd8c168c5f6a048bf41a15a401_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1046c7ddf33736346fa0effddd9cbcfb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
GetProcessHeaps
InterlockedDecrement
GetTimeFormatA
HeapValidate
OutputDebugStringW
PulseEvent
SetConsoleMode
CloseHandle
GetDiskFreeSpaceW

user32

MessageBoxExW
SetMenuItemBitmaps
RemoveMenu
DrawTextExW
SendDlgItemMessageW
SetCapture
OemKeyScan
GetScrollInfo
GetClipboardOwner

gdi32

EnumEnhMetaFile
PolyDraw
PolyTextOutW
FloodFill
ResetDCA
SetROP2

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE