a35c37cb854f0cfbce569b9f4d79ba61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a35c37cb854f0cfbce569b9f4d79ba61_JaffaCakes118
Size

44KB
MD5

a35c37cb854f0cfbce569b9f4d79ba61
SHA1

40c9391835c225ba5c32b4ed35af3a63ee39147a
SHA256

6406cfee48490b34862c94ad1694a5d0f7e9a2989b3fcb54e2022028b150c466
SHA512

15931b01d59487b11540fdc09a80b4db378090aeb49291a8e3c83064c8139a612f8aeee9b9ebdb9ae38229acc49fe33f701570b03f8c074a6ac6ea04d7dadc7d
SSDEEP

768:V9kgqvm3Vu1uS277ah1fb9l0wTSs7glRqRI4HjWkppljK5fTsPunM3tGf:Vmli9S27GTwEslURIuaivK5fTsGnMdGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a35c37cb854f0cfbce569b9f4d79ba61_JaffaCakes118

Files

a35c37cb854f0cfbce569b9f4d79ba61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac2659be77cec0c6a4ebf6c689535afd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryA
CopyFileExW
SetThreadPriority
VirtualProtectEx
GetCommMask
GetProcAddress
WriteProcessMemory
Heap32Next
CommConfigDialogA
GetCurrentProcess
AddAtomW
GetWindowsDirectoryW
EnumSystemLanguageGroupsA
GetCPInfoExA
lstrcpy
HeapWalk
GetProfileIntA
GetFileSize
TerminateJobObject
GetShortPathNameA
FillConsoleOutputCharacterW
SetFileTime
FindFirstChangeNotificationA

user32

SetCapture

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE