b64a3e1f31b141a666c92e8d05a70e79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b64a3e1f31b141a666c92e8d05a70e79_JaffaCakes118
Size

75KB
MD5

b64a3e1f31b141a666c92e8d05a70e79
SHA1

1ea24dde14282c1192276b9952add006308053fd
SHA256

d0ece396be1aff7407fb4d46a3b26c4547078f39e578293c491cee33b6fd671e
SHA512

5100f514b5343d9171f0f50498138411c38aec4950ea1190d25589f9f687f25db55a0f7a2f5eaf931a5a899df9abdda567fa044b7702189bd18564a9464b1c33
SSDEEP

1536:0UiEh07gbYKXffTWVTCwywoKxXDLZdfslzMv:RigqgkeWZCpw5DLZdfsuv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b64a3e1f31b141a666c92e8d05a70e79_JaffaCakes118

Files

b64a3e1f31b141a666c92e8d05a70e79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

948d3647947f3769506c794d67be296a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeHandleStateW
WriteConsoleW
RemoveDirectoryA
EnumResourceNamesW

user32

GetKeyNameTextW
IMPSetIMEA
DefWindowProcW
PostMessageW

gdi32

EnumFontFamiliesA
CopyMetaFileW
TextOutA
CreateColorSpaceW

Sections

.fasm
Size: - Virtual size: 162KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ