2328a3298ad458f95b45802a4a171a9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2328a3298ad458f95b45802a4a171a9f_JaffaCakes118
Size

148KB
MD5

2328a3298ad458f95b45802a4a171a9f
SHA1

b5ef1f0223818ee267f0379dd9c4ed98f5c35169
SHA256

d01b7c802407ef6c9f8d16aac7bd760257011939c06fa43d382a1670c6a4a744
SHA512

9077e118c1a6c4a8c61bb98e36431e38248c62c8d309963dd93ac8652755128aa8cacba21e4e952e0329c3794318fb3162aab44bad5ed62f877fe7f1b5b9afdb
SSDEEP

768:sUbcOksHBKiUFf+bHnMwZdxjh+tBdxKKVu1fdYOUDHwBjPRLkSUX6vaR3:L4sHBKLNuXxdQuB1ft0oLk84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2328a3298ad458f95b45802a4a171a9f_JaffaCakes118

Files

2328a3298ad458f95b45802a4a171a9f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

428abf3a4e7372729a6340e83828f6a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
DeleteFileA
FlushFileBuffers
OpenFileMappingA
ReadFile
OpenFile

user32

DrawTextA
GetScrollInfo
AppendMenuA
CreateIcon
GetMenu
DialogBoxParamA
DrawTextA
GetWindowTextLengthA
IsWindow
BeginPaint
GetMenu
GetMenu
AlignRects
BeginPaint
GetScrollPos
IsWindow

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegOpenKeyW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 105KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ