dcf3364d6b9439b349632e0fb25654b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcf3364d6b9439b349632e0fb25654b5_JaffaCakes118
Size

1.5MB
MD5

dcf3364d6b9439b349632e0fb25654b5
SHA1

da2a2b189de67bdab9456063277b60c384912af9
SHA256

bea03e505aad36d15489cd2303dda67d7b2b808d38ba125195cbdcd0bd3dadc8
SHA512

592a79f45e6832b6aa5f040ff0d6fdcefd3f2914b7dcc405aae49ffb6822bb56deebabc96d03be79b5a15229ccb537965976c4adc6801e550c553b9b7c10b5c4
SSDEEP

49152:jeVyF7b1AIZGxeelCTlb5A8Uro7I6RuzT1+Z:KYi9lCTR5A8Urmae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcf3364d6b9439b349632e0fb25654b5_JaffaCakes118

Files

dcf3364d6b9439b349632e0fb25654b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e463561a935f87acb29b9c2450729426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
OpenJobObjectA
AssignProcessToJobObject
EnumUILanguagesW
GetConsoleKeyboardLayoutNameA
FileTimeToDosDateTime
RtlUnwind
EnumCalendarInfoW
GetConsoleFontSize
GetWriteWatch
CopyFileExA
HeapWalk

user32

DdeSetUserHandle
ChangeMenuA
GetProcessDefaultLayout
SendDlgItemMessageW
SetUserObjectInformationA
RegisterClassExA
DdeConnect
VkKeyScanA
IsCharAlphaW
CreateDialogIndirectParamA
GetAltTabInfoW

Sections

CODE
Size: 9KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE