af43a4f93f98b1fcf45696550538bbe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af43a4f93f98b1fcf45696550538bbe7_JaffaCakes118
Size

67KB
MD5

af43a4f93f98b1fcf45696550538bbe7
SHA1

3b2a04e896dd0ca54297d9dde02f43ca40ab1322
SHA256

29ec8f51d0b1ffcc9df8ba891bdfdb12ddf04effb537eb389efdaa58c8c01c2a
SHA512

febe04b09a101b6f63ba9f4b55308a8135f470dbf35371ef0ee7d4ebbde3a12f9342ee893a840567a65280454a863ab2a32486ff59ecc7a4ab32041ea9ddba6d
SSDEEP

1536:bOODNkyWK70/Q8fScI2AWSFBny6gGRl1B31Josetr8aV:b9A8OQkSc9fyByRwx312XtrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af43a4f93f98b1fcf45696550538bbe7_JaffaCakes118

Files

af43a4f93f98b1fcf45696550538bbe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

518062f147d973bfc24f5fcfbe580cb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
SetConsoleScreenBufferSize
SetLastError
CompareFileTime

user32

DdeGetData
CreateWindowStationW
CopyIcon
GetWindowRgnBox
GetRawInputBuffer

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 363B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 413B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ