ad588d281831e4ff9c09cdd38ec24dd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad588d281831e4ff9c09cdd38ec24dd2_JaffaCakes118
Size

156KB
MD5

ad588d281831e4ff9c09cdd38ec24dd2
SHA1

c0ff83607fffdec814a396a45bd6eb651b0663b8
SHA256

17e581ad2bab4dda195afeb7928a8e9fc1241cd3dbf189a5a71cc2730d3d7fe9
SHA512

a02496aceaf27520790ac7e595e6ad1fea7d8b75e053071f9b95b71a17ac3c2fb35279ac9fb61580b49d8b1e1e7e6de934a31fe4a403c04773a2a2a7b8a3d550
SSDEEP

3072:xaoTW5IQ0lYMcc2QELtvak9dQP0hiQ9/v+uqV5lE:4oTWeQ0Xr2Ppvak9dQkb9/2uqXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad588d281831e4ff9c09cdd38ec24dd2_JaffaCakes118

Files

ad588d281831e4ff9c09cdd38ec24dd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b6ebeb30a254ed9591fb0d69127a599

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
FreeEnvironmentStringsW
ReadConsoleOutputAttribute
SetCommMask
VirtualFreeEx
SetupComm
FormatMessageW
CreateSemaphoreW
GetTempFileNameW
CreateFileMappingA
GetEnvironmentStrings
RequestDeviceWakeup
ConnectNamedPipe
FindNextFileW
GetCommMask

user32

LoadCursorFromFileW
LoadBitmapA
CreateDesktopW

gdi32

CombineTransform
GetPolyFillMode
GetTextFaceW
CreatePatternBrush
FlattenPath
GetSystemPaletteUse
SetGraphicsMode
CloseFigure

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE