d53a8abf2ef9f6e19a2a097e65eccb18_JaffaCakes118 | Triage

Sharing

General

Target

d53a8abf2ef9f6e19a2a097e65eccb18_JaffaCakes118
Size

3.8MB
MD5

d53a8abf2ef9f6e19a2a097e65eccb18
SHA1

a14518131cb897902954af31d7293b27d69ac345
SHA256

41e0ab237afcb70d21737a4a37bfc8d9b508a5af24cf23f099d4f033a5ed433a
SHA512

a66e8abf436cef75c2cc9c03d7cd393e1781fc7a99b6bb97c6bc003588fdadf29fe986ddbfdea42fa911c0d7f9b2f809d514181f015e11ff1e5d7264ad36645b
SSDEEP

98304:pVtsjAPmiv5BrHM1MF37B6ccCYCa7Mq+Xxx9kIsUs4Gdt:pVts0mEbrLJBfcCrnoIWdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d53a8abf2ef9f6e19a2a097e65eccb18_JaffaCakes118

Files

d53a8abf2ef9f6e19a2a097e65eccb18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ebadb97b0d0a00e6e1fd76356428e60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
VirtualAllocEx
GetCurrentActCtx
OpenFileMappingA
ReadConsoleA
UnmapViewOfFile

user32

ReuseDDElParam
EnumChildWindows
WaitForInputIdle

tapi32

lineMonitorDigits

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ