b28cd5afb072a98530e8bb03a0692ddf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28cd5afb072a98530e8bb03a0692ddf_JaffaCakes118
Size

152KB
MD5

b28cd5afb072a98530e8bb03a0692ddf
SHA1

afb082cadd566aeb498a5bd623d37f920e154b5b
SHA256

1b1ec892cb10717fa6b6e7195b0b094b7fc87546be6f035785db9c3308b814a2
SHA512

91388c3d8aa2b7cad763d39852c79e8ca815fe7329ae5b6420eb8c857ce5334354cfe9ca8b0548560e9d4b9109eb07fadf41f38360758afba2049dab8fc60851
SSDEEP

3072:MMsP6tGP6J8y97HevHCpw5vzxT3ckkO8w5n2ThWsNexPnCrn12:M1SgyJ8Y7kYw5vF3cHOznkP+6b12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28cd5afb072a98530e8bb03a0692ddf_JaffaCakes118

Files

b28cd5afb072a98530e8bb03a0692ddf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2beb791b1f1cc7b05a7ab4dc020ef882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
SetCurrentDirectoryW
WriteConsoleOutputA
OpenWaitableTimerA

user32

DefFrameProcA
GetWindowTextLengthA

gdi32

GetCharWidth32A
CopyMetaFileW
GetObjectA
LineDDA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ