be282e2ac70f1a59b4d5ddf5e15841d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be282e2ac70f1a59b4d5ddf5e15841d0_JaffaCakes118
Size

193KB
MD5

be282e2ac70f1a59b4d5ddf5e15841d0
SHA1

84ecfa49ba42a15fbc3382375bb2e0a2d0d57fcb
SHA256

da3642808daee799feff12efbc6839344c6e52d3664b9db1b286160884d3ccec
SHA512

f81206be16b767d788308fcd6238e6ebe27b50663214984908a4289f3da89f1f4cc7af33e6acc8a542094413225684064a4e00cef7a2b9930d4f399c67667309
SSDEEP

6144:T5WdVzjqKCW/jbF+qppNDp8uvt72jrHNK:lWdVz/+q39p8uViXt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be282e2ac70f1a59b4d5ddf5e15841d0_JaffaCakes118

Files

be282e2ac70f1a59b4d5ddf5e15841d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3145aafa5b841de0a951611fd1e933b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFiber
LoadLibraryA
SetCurrentDirectoryA
LockFile
GetStringTypeW
AttachConsole
EnumResourceTypesW
GetProcAddress

user32

MapVirtualKeyW
RedrawWindow

gdi32

GetMetaRgn
EndPath
ExtFloodFill
CreateFontW

Exports

Exports

dcapdeddbn
dxqrtasvjhkt
ieobwyhfmxqhimu

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ