b34c9a6fb1c9524679d3734fe19089db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b34c9a6fb1c9524679d3734fe19089db_JaffaCakes118
Size

4KB
MD5

b34c9a6fb1c9524679d3734fe19089db
SHA1

d77c673768e4be43aa67f3e0d2a83d1c88d17391
SHA256

43ba9a4322a5f33712a1d149ca844287d4755a24e57064779f23c10605652afe
SHA512

f5da321c316a7558183076fe190cccd238d25acfda136b2c70b939aadeaafd5a93507afaf578f6ae810ecc73cbfeaaf569175e692e05ccffceb57b2b2cde3d75
SSDEEP

96:twi7vWJWlbeeZDhRfBibpB6jQZP7UeOUCPOy3iKJVXSfR5:twkGWlbeeZDhRfBm3P7RObWy3iGSfR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b34c9a6fb1c9524679d3734fe19089db_JaffaCakes118

Files

b34c9a6fb1c9524679d3734fe19089db_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a39a110196186afc43ed00e2550396b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
EndMenu
GetKeyNameTextW
DlgDirListW
DrawEdge
DrawIconEx
CascadeWindows
CheckRadioButton
CreateWindowExW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 81KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE