b6356ef8ef5158d22496ff6352141b3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6356ef8ef5158d22496ff6352141b3f_JaffaCakes118
Size

102KB
MD5

b6356ef8ef5158d22496ff6352141b3f
SHA1

1314799befcebe5d7ebd47290d8c2a124e193f7a
SHA256

6bad444174a93c42e4aa173361a805e74171bf42de83f24824ef5f74ded5de39
SHA512

16d3786b4ce3eb7893ea986f1cc33a0f1f2dceb09c3a52ed29102ab7593468a87eedc31a8c7e4aeeea647a277790a8943ba255404b94ce7bc75f11046797c185
SSDEEP

1536:LRTVdCdXtvrrYgbGHjatQQuUZ6o00CQvEsaZtX4hCa6sWS9e+NM7DtV:Xd09DcgETUZ6N0CQvErx0W0e+M7Db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6356ef8ef5158d22496ff6352141b3f_JaffaCakes118

Files

b6356ef8ef5158d22496ff6352141b3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

afc37cc842d0f0b337cd0797735a25da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Community\Manager\Input\Direct.exe

Imports

user32

IsCharLowerW
GetDesktopWindow
GetForegroundWindow
DrawTextA

kernel32

GetProcessHeap

gdi32

SetTextAlign

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 635B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.just
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE