101eed4daa012094fc8e4d0093992a3e_JaffaCakes118 | Triage

Sharing

General

Target

101eed4daa012094fc8e4d0093992a3e_JaffaCakes118
Size

54KB
MD5

101eed4daa012094fc8e4d0093992a3e
SHA1

1459af3fef0ac5b3ec77fc4fa003774ce7ed715d
SHA256

8498df771779fddb4c4e2941f9085358bbf6a5dbfb8560ce88e4bfbd9e13422b
SHA512

7a88d055166637fa29ba9ab345bb378e9b3469fa0efaba90e146fc44a07ca8739e8238923d8d66c1beddf388ceb36f322eacd668f86ea10096246c61273d4669
SSDEEP

1536:+WkALHuTtmpyyInZ+oEmI70c4KlxLNji+ZAo4+kxPNxj:qTt8yvZ+l48LNXAo1klb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101eed4daa012094fc8e4d0093992a3e_JaffaCakes118

Files

101eed4daa012094fc8e4d0093992a3e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e0b8489a0052dbb47f17be0fb42c141c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
VirtualProtectEx
ExitProcess
ClearCommBreak
VirtualAlloc

user32

ChangeClipboardChain
GetKeyboardState
GetCursor
LoadMenuA
SendNotifyMessageW

Exports

Exports

ReadAcdoflduej
Wrejxvabv
Kfoqwxhto
OpenUsufqsearfy
Qbiiypjopf
Wievrxdyth
InitBpvcjxgl
Raocahnxiqi
Evbpefwibt
OpenYoufylgul
Qnaiihmhb
IsTyhwlmmypgq
Jyhhnvvys
Scdquksnpy
OpenStivsind
Rdnljbumvqn
WriteTrnkgyujx
AddYctpubtrtp
GetQswblsgk
WriteBsbcvda

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ