a5dc21819782d62ad90154b0a90b87b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5dc21819782d62ad90154b0a90b87b7_JaffaCakes118
Size

64KB
MD5

a5dc21819782d62ad90154b0a90b87b7
SHA1

a81b8534bb0c51a6fd0b800b15ecf033232a9abf
SHA256

12ba4fa472649a30bf8fc4aaea51b3d90a5f9a86b3e53831397987ccd88e6cac
SHA512

b0ca434cfcc35acc553f5200f20d313729b4b52dc07c370a2613ed416614fb3ea53d104758b48b25706dfa69d47b5b4b509406e90e2a4c93b5c4de493fd82092
SSDEEP

1536:De17pOW/7rIkyuuv6Qtr45oYMtQ6Tgbqwz4k9iJgh:DeZp5muYtr4pOlTQMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5dc21819782d62ad90154b0a90b87b7_JaffaCakes118

Files

a5dc21819782d62ad90154b0a90b87b7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

685716b884a06e03671de4d836fb34e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddConsoleAliasA
BuildCommDCBA
CancelIo
CreateDirectoryA
DefineDosDeviceA
Sleep

user32

CallNextHookEx
CharPrevA

gdi32

CreateBitmap

Sections

.data
Size: 512B - Virtual size: 353B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ