dc6aadf88c364fcbb937a80b177a43b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc6aadf88c364fcbb937a80b177a43b5_JaffaCakes118
Size

39KB
MD5

dc6aadf88c364fcbb937a80b177a43b5
SHA1

a752b62a3b421146f7ec1025cba5b10d580dede4
SHA256

f8a1a0f710886935668b15aa4aa38b1b36e08045692553a6d39c906f57b5ef06
SHA512

55d17fe2224b5361f756421d9272f61647c708a5c6518addaac25a2a49539fbec895e949b852ca0fdefbb1054c8609099a2c6f974317eac99be4724a0bb10cc9
SSDEEP

768:eC8SBB//z8vGEfEF+gYTey5fmhTnKhaByQd:eCXvuGEFT8nKhafd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc6aadf88c364fcbb937a80b177a43b5_JaffaCakes118

Files

dc6aadf88c364fcbb937a80b177a43b5_JaffaCakes118
.exe windows:2 windows x86 arch:x86

9dc8da3323c7b8c8ed068c62181bf29e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsA
CopyFileExA
GetCommandLineA
GetTickCount
lstrcmpA
GetCurrentProcessId
GetVersion
GetCurrentThreadId
VirtualAlloc
GetShortPathNameW
FatalAppExitW
GetComputerNameA

user32

SetParent
SetCursor
CreateDialogIndirectParamA
GetDesktopWindow
RegisterClassW
EmptyClipboard
CharPrevA
GetIconInfo
RegisterWindowMessageW
GetClassInfoW
GetScrollPos
DialogBoxIndirectParamA
GetMessageA
CreateDialogParamA
RemoveMenu

gdi32

CreateDCW
ExtTextOutW
LineTo

advapi32

RegCreateKeyW

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 967B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ