f6e0a184647d790b839664b6059d80de_JaffaCakes118 | Triage

Sharing

General

Target

f6e0a184647d790b839664b6059d80de_JaffaCakes118
Size

23KB
MD5

f6e0a184647d790b839664b6059d80de
SHA1

672c13e46868901a186a25781bf74c9fe219ae3a
SHA256

40b7043cccbb249f145a470d9a74ee2e6815877e25b983f928bd37d7fb6f3ec6
SHA512

f921f879943381f5cbf8bb0f8ea5691091b8c2a47a76559cb9e930054b4de51de9bd16531c96b6703b2a90a400c181f236ac761160b98a629a16bde36873bfa9
SSDEEP

384:KvANWz+qtqaZq+fnzuGT1Jyt9rGQ+MR92l9rPC:KuIbYxG5Jy3b+MR92jrPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e0a184647d790b839664b6059d80de_JaffaCakes118

Files

f6e0a184647d790b839664b6059d80de_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e7ecbc72d1ecb8f778a2963a68c6e5bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
PeekConsoleInputW
GetLogicalDriveStringsA
SetConsoleInputExeNameW
CreateEventA
lstrcmpiA
SearchPathA
GetStartupInfoW

user32

CreateWindowStationA
BroadcastSystemMessageA
GetWindowModuleFileNameA
GetWindowModuleFileNameA
CharToOemBuffW
MessageBoxIndirectA
LoadMenuIndirectA
DefWindowProcW

gdi32

GetObjectA
GetCharacterPlacementA
CopyEnhMetaFileW
GetCharWidthFloatA
ExtTextOutW
LineDDA
EnumFontFamiliesExA
CopyEnhMetaFileW

Sections

.masm
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ