d19d303ea430bab4a04949d66a8a0a44_JaffaCakes118 | Triage

Sharing

General

Target

d19d303ea430bab4a04949d66a8a0a44_JaffaCakes118
Size

146KB
MD5

d19d303ea430bab4a04949d66a8a0a44
SHA1

5f61971edc7b76c0255a41736f4c2a1c18d25391
SHA256

9114ce4fb265a6082ec70cfad06deb0910e41c2942b32beda4a20b172db75460
SHA512

e0c66886224dfb248209a0a02dd796ea1563660d7b8bf0c6ae3ddf7a24b6d938ef37beba190ca78143ec8812f8d513df722b637c89af735fe2909d39e19e51ba
SSDEEP

3072:92vwZ/Al0PuWkFzu5QoRjWcjMHiyxkx7ABzNUsI6ANk:QYtO0Jr5gcmiCkVgzNHN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d19d303ea430bab4a04949d66a8a0a44_JaffaCakes118

Files

d19d303ea430bab4a04949d66a8a0a44_JaffaCakes118
.exe windows:1 windows x86 arch:x86

568ab3e216e0b52ac840f3ab08a04faa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DuplicateConsoleHandle
GetPrivateProfileSectionNamesA
CloseHandle
GetFileSize
GetCommState
OpenEventA
MultiByteToWideChar
ExitProcess
SetConsoleLocalEUDC
SetFileAttributesA
lstrcpyA
VirtualAllocEx
Heap32ListNext
GetExitCodeThread
GetCommandLineA
lstrlen
IsBadReadPtr
MulDiv
PeekConsoleInputA
GlobalAddAtomA
LocalReAlloc
RequestWakeupLatency

winspool.drv

EnumPortsW

user32

EndDialog
TrackPopupMenu
CreateIconFromResource
EnumWindowStationsA
GetWindowTextA
GetWindowContextHelpId
DrawFrameControl
GetInputState
AlignRects

advapi32

RegCloseKey

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 90KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ