013430e9e8c734ac7e3bdc2600a3e625_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

013430e9e8c734ac7e3bdc2600a3e625_JaffaCakes118
Size

42KB
MD5

013430e9e8c734ac7e3bdc2600a3e625
SHA1

eed587cc67cb1e7db16a3f6df5cfaf6208b89016
SHA256

6edb94b3bfa0cec3f1d79968cc1d718ffa6a08d6cc33e2707849362b24f6214d
SHA512

dea272efa442f4e9f079bc4e4f2f3ebda4619a4866173d51c40117ccd261cf45281ce02152b4fa9af97a17748faed0d999ae20dc6619abc53ab055aa4df67692
SSDEEP

768:dkpp9BxlC4Y2CDcndXEGSy/5HDWUeDHCkC5HVYPCC+9:dkpp9BtndX7SyhjNewHyP1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
013430e9e8c734ac7e3bdc2600a3e625_JaffaCakes118

Files

013430e9e8c734ac7e3bdc2600a3e625_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d8c43172213c11d76c24ef31d37fd491

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyW
RegOpenKeyA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ