dc543a26a0b3e6207acb9e6ab77008bc_JaffaCakes118 | Triage

Sharing

General

Target

dc543a26a0b3e6207acb9e6ab77008bc_JaffaCakes118
Size

160KB
MD5

dc543a26a0b3e6207acb9e6ab77008bc
SHA1

84cd46ce11dae7eeb7d247eacb3493594722ab71
SHA256

de4b47ae44468507c0f1c5f7b22600b32a610f923e19dfa954b2a9ca1d8b2bbc
SHA512

cb501a29c34e4f7be2617015f4d210427d3a6f5fbb67d1dea55490e2a78527f38ebe2ba3f8dfc3056f80eac5dc82e7bc0beca042a183670a87665c9d6ff0f2de
SSDEEP

3072:8y5Ax8QSdmQ4dZupt6vNB+3vMdnncagD6WAd1KLjwgwReoQq6dGR+V2T7vQYr2Yg:b5w8/EApg/cv+nch2WZwRhl+V2vQY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc543a26a0b3e6207acb9e6ab77008bc_JaffaCakes118

Files

dc543a26a0b3e6207acb9e6ab77008bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92a2bdd18575624ef075a48e8c890ecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
EnumResourceLanguagesA
ReadProcessMemory
FindAtomW
_hwrite
_lwrite
GetNamedPipeHandleStateW
WriteConsoleW

user32

PostThreadMessageW
CreateWindowStationW
DlgDirSelectExW
SetMenuItemInfoA

gdi32

GetWorldTransform
CreatePalette
CreateICA
SetAbortProc
PathToRegion
GetRandomRgn

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE