16403265dedc0773a2049096748b4d99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16403265dedc0773a2049096748b4d99_JaffaCakes118
Size

8KB
MD5

16403265dedc0773a2049096748b4d99
SHA1

7af5f952383f09616e5f3d66bdef433a5cedabf8
SHA256

ac723dd1dcce8d1a978c4094a0a658edb2c5a5891b99278bfe526c6628d442d7
SHA512

e8c1aa3f8d9b706974e52a102c288432078a17dfa72ad6a63ae46766ff8ce8a7e423e3e5d5e0d33d2844da58a37e9d45b17b81316120e1b520ff81428b423ed0
SSDEEP

192:DhnZZGWlbeWPAKfMY42aK5rSoWWUfMRZUr8/zL/:DViW4KfMY42agrRCfMRZUr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16403265dedc0773a2049096748b4d99_JaffaCakes118

Files

16403265dedc0773a2049096748b4d99_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a39a110196186afc43ed00e2550396b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
EndMenu
GetKeyNameTextW
DlgDirListW
DrawEdge
DrawIconEx
CascadeWindows
CheckRadioButton
CreateWindowExW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer

gdi32

GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW

kernel32

ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 76KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE