d6b5d26754daf4fc3eb821a9a334a823_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b5d26754daf4fc3eb821a9a334a823_JaffaCakes118
Size

54KB
MD5

d6b5d26754daf4fc3eb821a9a334a823
SHA1

e6a99fbce09de12a706cde49a2a2782a66c13349
SHA256

2e2178d7a3d89f0d24845e75238d9ddf8d235c8f21ae8e6cddf86418acbf6d47
SHA512

87acea538af9159a248a95e6fe6d2af5f4aea09b612629e7ad892c76a3beaa92a11175e4d00477c21a1f75806920defff5d1044283b98b76f2335f223d4937f9
SSDEEP

1536:sYytQqgOrahEY/UPPezVftmh0w53tz6GXCwLi0rAUleTj:sY40oa3rzVftGJ53fywLxAhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b5d26754daf4fc3eb821a9a334a823_JaffaCakes118

Files

d6b5d26754daf4fc3eb821a9a334a823_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fbda3c4098571a4ee938421402cee218

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
LoadLibraryA
TerminateThread
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
InterlockedDecrement
GetProcAddress
GetSystemDirectoryW
CompareStringA
CompareStringW
VirtualAlloc
OutputDebugStringA
ExitProcess
CreateEventW
LeaveCriticalSection

msvcrt

_stricmp
strncmp

user32

GetDC
GetDlgItem
GetWindowLongW
GetWindowLongA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ