288bcfebf2934705d79208544e01af76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

288bcfebf2934705d79208544e01af76_JaffaCakes118
Size

54KB
MD5

288bcfebf2934705d79208544e01af76
SHA1

e462101d02f9ed6d52ae6b81af0ab6898677fa49
SHA256

8abf0fe05325e38f343164e324b759ca19a96593a86856dc695029ca2ac47d20
SHA512

318dfb93f023553191d778c9380876b7615ab97e4e8f3b4535827074eb24d0380ff90782d6f700ca520d97bb2817cead0b9d583026f340ba69e91c1204dfdb39
SSDEEP

768:eRMMBZV4R1wPGYq+PyS61KdmljMKHCm5z7efcj/YV9qyLpgzNt:eR3Blhq+PyS6odmpHRB7efcKqzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
288bcfebf2934705d79208544e01af76_JaffaCakes118

Files

288bcfebf2934705d79208544e01af76_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19015ea4b83ff0e679755fbb8a6d16f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapWalk
ExitProcess
VirtualAlloc
ExitThread
GetLocaleInfoA
VirtualProtect
TerminateThread

user32

DisableProcessWindowsGhosting
ChangeClipboardChain
SendNotifyMessageW
IsWindowInDestroy

Exports

Exports

IsQbjyqgijju
Khwscjoinom
OpenHwwxbuca
Rwwfobfl
Pcgkhwvkxw
Chiirjy
Hqqsdrraufy
EndNbxuswkgqnv
Nrhatanqik
EndVpoxcqhsl
Qpflqqnscu
AddJqdkcshenhw
OpenSpaqugaqjdl
CloseExptnno
Gtovgiehv
Knpmiwl
AddXdrsbgeg
Ohixqahe
Rhtktetqvf
Fmwpssyfd

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ