b63dcab68ba79089ce7f92cef476e2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b63dcab68ba79089ce7f92cef476e2eb_JaffaCakes118
Size

240KB
MD5

b63dcab68ba79089ce7f92cef476e2eb
SHA1

03449433e0ae051dfbcf6c3184481ed42d15bc6a
SHA256

8f08c8f63c077ad831e7b190735d88bbc20538aa3844854590ce2cd2d07d4d9e
SHA512

f7cc43aecaa5c1b27f5471bad0c9f522622670fda52edcbbd34f4eb71254f4a406531f2e50a0466fc5e4cdd4e0d60b9bea81f26ae2a5d1f3381a163ee4b9048e
SSDEEP

6144:JieuCOXlEXQcSY88gIRS3hezC5n10Hfzx/Ma:JhhAPYDgIR21Q7x7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63dcab68ba79089ce7f92cef476e2eb_JaffaCakes118

Files

b63dcab68ba79089ce7f92cef476e2eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af30ce5e403b17e93072b8789436b598

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsA
GetProcessHeaps
SetDefaultCommConfigW
GetConsoleCP
SetProcessAffinityMask
GetPrivateProfileStringW
BeginUpdateResourceW
OpenThread
GetTapeStatus
OutputDebugStringA
SetCommMask
SetPriorityClass
FreeEnvironmentStringsW

user32

DestroyIcon
GetTabbedTextExtentW
DdeQueryStringW
ScrollWindowEx
GrayStringA
DdeNameService
DefWindowProcW
RemoveMenu
GetProcessWindowStation
GetKeyboardLayoutList
CountClipboardFormats
CharUpperA

gdi32

AbortDoc
ModifyWorldTransform

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE