dd8502724c16396fa2f0794343ee6a01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd8502724c16396fa2f0794343ee6a01_JaffaCakes118
Size

46KB
MD5

dd8502724c16396fa2f0794343ee6a01
SHA1

666e0496ee125de12d5592cc4de051ccf03a6363
SHA256

23fa7bf847e6d5c36ce24c3f118a3238c397d8829a5cfae369a07a439cbc1ed8
SHA512

0fbba21060ad0a0381a55b0f7b1243f2981e1e99b5033e6add52535283c57a38d8d8bdbc56d3b6a7f4a539b52c696231d4e00349a3efd0428a1fbe186c61beb0
SSDEEP

768:JAia4dYaVufEL+8O23UzVf39117XSAjmNZw0ByKdYRzOYacg98YfGQ+6/9MCkH/:Jba4SaVufg5gVj1T9gTWTAjf0Ca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd8502724c16396fa2f0794343ee6a01_JaffaCakes118

Files

dd8502724c16396fa2f0794343ee6a01_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e95281cfd4b89c456ca878c1d3d424ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExA
ReadConsoleOutputA
WritePrivateProfileStructW
CallNamedPipeA
OpenFileMappingW
SetFileAttributesW

user32

GetUserObjectInformationA
CharUpperA
OpenDesktopA
GetMessageA
GrayStringA
wsprintfA
SetClassLongA
SetClassLongA

gdi32

GetLogColorSpaceW
GetTextExtentPoint32A
GetTextMetricsA

Sections

.masm
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ