b7ffed47551cd2c73abeb74a8dec73d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7ffed47551cd2c73abeb74a8dec73d5_JaffaCakes118
Size

669KB
MD5

b7ffed47551cd2c73abeb74a8dec73d5
SHA1

726dc4529ac21368756f5bd4a051d04d57d7a076
SHA256

dcdbc648077fc793eb2d84ae167ad295ed463df6308c12dbff58277a09abf130
SHA512

3f62b153d8eb13e4d09702eba874f15889f321c2255d231a8fb17cadc835ba5523b7de783aaaf8f5a4979aa44a0f872f9bff4f3b304dee064cef940eae3aff4a
SSDEEP

12288:iQvXCGRr3xy14AprZC5yH7AbuoEDhu/38HiXwnJJ8dqjI+XYUBYi:ikXCGRrhy1DZC5yHEKjm8HpnrU+XYGYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7ffed47551cd2c73abeb74a8dec73d5_JaffaCakes118

Files

b7ffed47551cd2c73abeb74a8dec73d5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

64e4c18e1f580fdf71d22ff8ced85bd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
WriteConsoleInputA
VirtualAlloc
ExitProcess
VirtualFree
OpenFileMappingW
ExitThread
GetComputerNameA

user32

SendNotifyMessageA
DrawTextExW
SetProcessDefaultLayout
ChildWindowFromPointEx
GetIconInfo

Sections

.text
Size: 652KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 935KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE