38e310e1899620bffbc8c8688a6ef264_JaffaCakes118 | Triage

Sharing

General

Target

38e310e1899620bffbc8c8688a6ef264_JaffaCakes118
Size

340KB
MD5

38e310e1899620bffbc8c8688a6ef264
SHA1

6ed993a446970bb2d39739ce1c4a5044fb531b37
SHA256

acaae82e5204630ffdef807e652f1dcac4fa95ac2597bb02482fb408573e4ee6
SHA512

000b2f984899bc442e732bc2ad395cac851e571dedd5fd27118e17a356e712107c2c6bbee13983c9f2765b796dbe6d400335b4f1b2b5893f421496dcc185d110
SSDEEP

3072:lZ8x0/lk/TCpXj1H+am0SeAePqeYm88J5ZOiXKdsqYa/Qm7/f9pO8LJvs7qYyuJ:X8xZ/mpTR+aFvP9xuiaka/QIoA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
38e310e1899620bffbc8c8688a6ef264_JaffaCakes118

Files

38e310e1899620bffbc8c8688a6ef264_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c10a851feb4573b74de22739b7febbe9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetVersionExA
VirtualAllocEx
GetStdHandle
GetModuleHandleA
GetCommandLineA
ExitProcess
GetModuleHandleW
WriteFile

user32

LoadIconA
IsClipboardFormatAvailable
GetClipboardViewer
DrawMenuBar
LoadCursorFromFileW
IsCharAlphaNumericW
IsCharAlphaW

gdi32

DeleteDC

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

advapi32

RegOpenKeyA
RegQueryValueExA

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ