ea689a657b1c84b8971d591931f1ba6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea689a657b1c84b8971d591931f1ba6d_JaffaCakes118
Size

42KB
MD5

ea689a657b1c84b8971d591931f1ba6d
SHA1

8c891f073efceace4feb8cf92da3c766a75a99c6
SHA256

e9283573ffa63912b5f666dcc762c227763c64ef4ad22b36b63b2ef40b7bd43a
SHA512

f5e8f0e04e91a507a96214b67ccc9ff6d1d284bfe55ccd9d883f3841c340eac3d9f4a036ff6ddaaf8abd1e90367857476687799521894b2188eb3cb643ed0dbf
SSDEEP

384:MD77k3cO90VO5jJAwAmGR6c2tS/ZInT5L3S14yhYuKesOi+V/cqdqIJ2MMmHCkCr:MjksgAuhti4PuDz1cqqIJzCkC5HVYPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea689a657b1c84b8971d591931f1ba6d_JaffaCakes118

Files

ea689a657b1c84b8971d591931f1ba6d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62ac18960fd7232e1ee90ef410fcda48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ