ba07ddddd64bc47d2c27b5b2174bebd5_JaffaCakes118 | Triage

Sharing

General

Target

ba07ddddd64bc47d2c27b5b2174bebd5_JaffaCakes118
Size

244KB
MD5

ba07ddddd64bc47d2c27b5b2174bebd5
SHA1

a3188af57c58b4b861aa90ab60ea5e6c920829ba
SHA256

48f649415e51440469b9d2f416f5295ff2eda301becd114f1574a10a8aabea83
SHA512

e8e18aedd1f984dee1df87dba8cc3d57d22d192396cf9bf476bd051f1fbef70a2975eec5b2cb566ac859f014a8bfbd4db6108586a6fcf67b7e76d4d51cf32c1c
SSDEEP

6144:mWZr9xMx6cwvYHKT04uYeUZyfMd6kWq8ymrf1BpgIc+Xpl2vi:mkr3BcwUKg4uGwUpYXppc+l2vi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba07ddddd64bc47d2c27b5b2174bebd5_JaffaCakes118

Files

ba07ddddd64bc47d2c27b5b2174bebd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f4ee1b1c09eaa12236022cabe687d78

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileStringA
TlsFree
ExitThread
DefineDosDeviceW
GetFileAttributesExA
ReadConsoleOutputCharacterW
MapViewOfFile
WriteConsoleW

user32

ChangeMenuA
SetClassLongW
CreateWindowExA
GetWindow
CreateDialogIndirectParamW
RemovePropA
IsCharAlphaNumericA
GetWindowThreadProcessId
DrawAnimatedRects

gdi32

PolyPolygon
BitBlt

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE