b671220a2895fd7474365ee97d9d5e30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b671220a2895fd7474365ee97d9d5e30_JaffaCakes118
Size

5KB
MD5

b671220a2895fd7474365ee97d9d5e30
SHA1

d0589adaa672e2e2ca427c3f6372d06f3d727430
SHA256

49cc7f96a32d4433cc19a0e508b6b5d9d5557b9cbb5670da30ae9cedf838fbc7
SHA512

74f24b8cddbf1578bd0abccd7ab65d20a1c2c1e0cc924bfbd74f8f773d5dc735d89bccd9c8da55aaa5cdb5664d5070978bfcf29d222d5b2eef0f160a6006af42
SSDEEP

96:twi7vWJWlbeeZDhRfBibpB6jQZP7UeOUCPOy3iKJVXSfR687iKzcU34kXunO7:twkGWlbeeZDhRfBm3P7RObWy3iGSfR6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b671220a2895fd7474365ee97d9d5e30_JaffaCakes118

Files

b671220a2895fd7474365ee97d9d5e30_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a39a110196186afc43ed00e2550396b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
EndMenu
GetKeyNameTextW
DlgDirListW
DrawEdge
DrawIconEx
CascadeWindows
CheckRadioButton
CreateWindowExW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 81KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE