b56673fcba0243370a845dfaaa9a46e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b56673fcba0243370a845dfaaa9a46e9_JaffaCakes118
Size

27KB
MD5

b56673fcba0243370a845dfaaa9a46e9
SHA1

4e41a28c30de2edc7c9af1f9d4247015274af245
SHA256

5717ededab4df35d36c6565e5edd0e68a0e5f8019829e5e11ac1ffc96f67e99b
SHA512

b654779b7556b15419593f8c5ef416c762a0f443be1fc7542a6636682423b9d09b6fd4ba88200cdfb4a24f2beff71d34dbea4bc461615aa3fd7877e8c591e839
SSDEEP

384:Cw3IIIISixM3cPQZbdfuZV3cdGVPybVcRPLM:F3IIIIecPQZRWZV3nB6c5Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b56673fcba0243370a845dfaaa9a46e9_JaffaCakes118

Files

b56673fcba0243370a845dfaaa9a46e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

968f9faad705f8671829fe1a4ba8d0df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ToAsciiEx
IsIconic
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetMessageA
GetKeyboardState
GetKeyboardLayout
GetKeyState
GetKeyNameTextA

kernel32

VirtualAllocEx
ReadFile
OpenProcess
Beep
CloseHandle
CreateFileA
CreateThread
DeleteFileA
ExitProcess
GetCurrentProcessId
GetFileSize
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree

msvcrt

asctime
localtime
time
fopen
fprintf
fflush
fclose

shell32

ShellExecuteA

psapi

GetModuleBaseNameA

gdi32

SetMiterLimit
SetDCPenColor
GetObjectA
ExtCreatePen
CreatePenIndirect
CreatePen

winspool.drv

AddPrinterA
ClosePrinter
DeletePrinter
EnumPrintersA
GetPrinterA
AbortPrinter

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ