abe7f9a81f5087fe406012246a9b00ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abe7f9a81f5087fe406012246a9b00ff_JaffaCakes118
Size

88KB
MD5

abe7f9a81f5087fe406012246a9b00ff
SHA1

f591e46045fe4f5e2472f1d60cebdba400ce0010
SHA256

83f44c449547c2d364b1a572abf053f1a8b8e3d92f29ebf564496d09500f51e2
SHA512

1e8957f0fa0cba62012d3faf23f1d65357c7ad2b3bff55227e7a27ddd64a1857ea19a61cff67c016eeb56e228710799599fe13179c17b3dc2773244dedee7118
SSDEEP

1536:+P89LrUrhcogQo66pyD7XAyWBtucIq2hyAaDveEKDrDrq3Z6kk5Zl/EFFhmDkOug:/ol7zDsFtBveE+Drqpxw/EbsDrV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abe7f9a81f5087fe406012246a9b00ff_JaffaCakes118

Files

abe7f9a81f5087fe406012246a9b00ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a39a110196186afc43ed00e2550396b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
EndMenu
GetKeyNameTextW
DlgDirListW
DrawEdge
DrawIconEx
CascadeWindows
CheckRadioButton
CreateWindowExW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 76KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE