dc7373043c9c1a95d7b63f51655486a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc7373043c9c1a95d7b63f51655486a0_JaffaCakes118
Size

47KB
MD5

dc7373043c9c1a95d7b63f51655486a0
SHA1

ee3d3cb67c247d03a9f128d11f9b89866618acf7
SHA256

0d38b51909b9477021686b0e4705273b7058d0fd657b9db3e58ae5c8f511f087
SHA512

c5b406442a010fb51253f06e964ba63b1818def9d2bb945af4fb887a2276cc6076ab74c33e1d90c5704f083602848dc15b4ab94525eee740620507c1e4b8f420
SSDEEP

768:IZTcn9rtLtByFvH+rfpWHs6qdw99V0fHe5lvVY436ES4rGly9hD7j9c2/Nl3GxJ1:g0rVthTpWHnqObefHuC4qx4rGk9hD7jY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7373043c9c1a95d7b63f51655486a0_JaffaCakes118

Files

dc7373043c9c1a95d7b63f51655486a0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d79476724e92792c4d9baf8ea889bbac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthA
ReadConsoleOutputCharacterA
WriteConsoleW
OpenFileMappingW
CallNamedPipeA

user32

wsprintfA
InsertMenuItemW
GrayStringA
CreateMDIWindowA
InsertMenuItemW
DefDlgProcA
SetClassLongA
DefFrameProcA
CreateDesktopA
IsCharAlphaNumericW

gdi32

SetICMProfileA
EnumFontsA
CopyEnhMetaFileW
PolyTextOutA

Sections

.rdata
Size: 45KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ