dc1ef00bae4508a3080df91022b2de5d_JaffaCakes118 | Triage

Sharing

General

Target

dc1ef00bae4508a3080df91022b2de5d_JaffaCakes118
Size

12KB
MD5

dc1ef00bae4508a3080df91022b2de5d
SHA1

e38667d6e022b6da2b8b60d30f59405be979f82c
SHA256

df4dbefec0e607556b87b538b3fccec118c4e44e2539b3a9528e532c2f23b6fc
SHA512

e3515d596df3b936508e2fef0fdbe7ca5db8928a6acd05637d6090900ec3ca12ee8a1bf72a3a086faa076dad1f05296c6175708cff35ec05ef944b9673c292fd
SSDEEP

192:9L1LBLP2qyJyZ5/7WidSLoJ6y/iz1Q3c:9L1x74yZVWidSRtq3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1ef00bae4508a3080df91022b2de5d_JaffaCakes118

Files

dc1ef00bae4508a3080df91022b2de5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ca7647e50e6d866f587e1ba0573c24e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameW
GetStringTypeExW
EnumSystemCodePagesA
CallNamedPipeA

user32

SetWindowsHookA
GetKeyboardLayoutNameA

gdi32

RemoveFontResourceW
GetCharacterPlacementA
CreateMetaFileA

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ