9ca39e982e385f37935ec8bc29debfe6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ca39e982e385f37935ec8bc29debfe6_JaffaCakes118
Size

32KB
MD5

9ca39e982e385f37935ec8bc29debfe6
SHA1

f2b63219fe34666a00498c78d8d7b01ee4d7496f
SHA256

48440ec35c2cd1d6dcd8409f945fb7c0bfc71c7d856ac1f7420603ccd25ee691
SHA512

fc02290b0c18d304fb5d1272fa15f9c241bf4ae30519204c2fa424ec9bb00bbc173a7ccb0e5948317e63536f9bcf738ccb90e3031f46f167cbc8aeeca460906c
SSDEEP

768:bJ0KLvYhTzkXJlN32Q6J9J8/FZSu297DREH:F0KLwhPONz8J8/FOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ca39e982e385f37935ec8bc29debfe6_JaffaCakes118

Files

9ca39e982e385f37935ec8bc29debfe6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

496c71d51b31199fb747aa45b34a74e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

user32

SetFocus

comctl32

InitCommonControlsEx

ole32

CoGetMalloc

Sections

.MPRESS1
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE