f6e0aadc593f897510e81667738f6e7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6e0aadc593f897510e81667738f6e7c_JaffaCakes118
Size

4KB
MD5

f6e0aadc593f897510e81667738f6e7c
SHA1

15f85e91e340553b4270bd99227e150ac7d20f6e
SHA256

1cf834dd4affdf6f8c3d2adea77ecfb6696280785b3ede58ff26f1bb0c36a9f4
SHA512

ac9ef12fd6a23d03ccb6b114a2a6c8ef4e30945d49f04d33d22bd7d7a92e32aedf4dfef0fb6f5fd7d592173e2e0638823435fad06b61be6082138c71a5cd7a67
SSDEEP

48:qrsXBoPubnnsiIVwVwVzmbo6hGzw4ItB6BM:YksxUboqYw4ItgB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e0aadc593f897510e81667738f6e7c_JaffaCakes118

Files

f6e0aadc593f897510e81667738f6e7c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab8dffa664d46f3b0a3d65acde812eef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ToAscii
CallNextHookEx
RegisterHotKey
GetKeyboardState
GetKeyState
GetKeyNameTextA
GetForegroundWindow
GetClassNameA

kernel32

GetTimeFormatA
GetLocalTime
GetLastError
GetDateFormatA
ExitProcess
CreateToolhelp32Snapshot
CloseHandle
CreateMutexA
GetComputerNameExA

advapi32

GetUserNameA

msvcrt

fprintf
fflush
fclose
fopen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 827B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE