0f356324f73c6601e2f2baca83e8b5d0_JaffaCakes118 | Triage

Sharing

General

Target

0f356324f73c6601e2f2baca83e8b5d0_JaffaCakes118
Size

26KB
MD5

0f356324f73c6601e2f2baca83e8b5d0
SHA1

9a51cc59e0c90e4ee1458c457ef7fd34167174d5
SHA256

e0088337d8bdf3d1c72ecb8b6159d42393e63eca7605b5f459fe95960171a403
SHA512

f3ea7ca90a2435cae85d9289183e09a2d4e2a9d2ec6fb381a00e55024ae81fe3e88b73d8519d05158660a2232422f10aab47cc9100e50edba5efd0d2c64a60a8
SSDEEP

768:yKczz95JqO1NGBy32X0iTbRw8fPxpdMVjFNcHD:yKcP9nj1NOT9w83x4xNID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f356324f73c6601e2f2baca83e8b5d0_JaffaCakes118

Files

0f356324f73c6601e2f2baca83e8b5d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d8b69c765474c35744bb9bf3a700404

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseCleanupAppcompatCache
GetSystemWow64DirectoryW
IsWow64Process
RequestDeviceWakeup
CreateMailslotW
WriteTapemark
AddAtomW
GetCPFileNameFromRegistry
CreateMutexA
ReadConsoleInputExW
GetStartupInfoA
GetModuleHandleW
GetThreadPriority
SearchPathW

user32

RegisterClassW
RegisterMessagePumpHook
DeviceEventWorker
DdeCmpStringHandles
DdeCreateDataHandle
WinHelpA
ToUnicodeEx
DrawAnimatedRects
CallMsgFilterW
LoadBitmapA
RegisterShellHookWindow
GetKeyNameTextW

Sections

.text
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ