1936aeee4133935d0fe5ea1e0bf8e77c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1936aeee4133935d0fe5ea1e0bf8e77c_JaffaCakes118
Size

68KB
MD5

1936aeee4133935d0fe5ea1e0bf8e77c
SHA1

ed978b7378bd4b185dd8b9ebde84f6172e0f303a
SHA256

e7db8237bd1cc33da9bd27f4df644d70b91b55f333e545ee548f5169e129afeb
SHA512

d20763f636f84bc111af13a697115a779ee71ca0c97f82927bd9f8b7793deaef0bec8957cde6a41f31fef13b6ad6ccf5018c16006c61d9661bada3f8a13cd006
SSDEEP

1536:FndSqrPpiVwghaAglW8tSrm/5Jbmsi0ZXrBFuED9D8GOrS2Bzt:Fngqr0IAglP/9msi0Z7BP9DiS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1936aeee4133935d0fe5ea1e0bf8e77c_JaffaCakes118

Files

1936aeee4133935d0fe5ea1e0bf8e77c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ