98beb5cc28ed2308abeeb40599b79635_JaffaCakes118 | Triage

Sharing

General

Target

98beb5cc28ed2308abeeb40599b79635_JaffaCakes118
Size

81KB
MD5

98beb5cc28ed2308abeeb40599b79635
SHA1

99cdab35bbd7d36c8d5bfb8b7f81001d249123ce
SHA256

9cab4b879bbfa939a873adc9d709d245609588a1f535340aea81acb266b54200
SHA512

30b6f300d64d4fe0c60cdd3c1952b7372b84cf2518317ddc6b03de70770d6f24bb422dbf46abe5aa72a2353ab13e9830fb570d4117d4fccc1822419b49114cc6
SSDEEP

1536:t26DT3BN2bGbA/kz5lzzLonj9914fo/b9tCAb+Vyl:8oT3v2P05ML14Mwyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
98beb5cc28ed2308abeeb40599b79635_JaffaCakes118

Files

98beb5cc28ed2308abeeb40599b79635_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2608560d9ef5c667a571f6f2ad1b7da6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Community\Manager\Input\Direct.exe

Imports

gdi32

SetTextAlign

kernel32

GetProcessHeap

user32

IsCharLowerW
GetForegroundWindow
DrawTextA

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.that
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE