345b0f3a594329ed68d5cf746b21660b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

345b0f3a594329ed68d5cf746b21660b_JaffaCakes118
Size

106KB
MD5

345b0f3a594329ed68d5cf746b21660b
SHA1

e196bfb9dd5a94ae231aa8ff9a5e67988d06a5f1
SHA256

52c53fcca7356a8c76a9fe2eac4a128ffeeb6133fef8ac12239832ba632be687
SHA512

8d6a25db101eb2a3d57fb75a0343cf04c72ebb707c74575fe5e9fc8d3a7ff6ced780d131a5f44f006e4c25e8805c624808d75259fd11948efe7cadf0831cf43e
SSDEEP

3072:4/qQLVD0xcaDHXlBGfvk/qQLVD0xcaDH5:Q3OBD3lBGc3OBDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
345b0f3a594329ed68d5cf746b21660b_JaffaCakes118

Files

345b0f3a594329ed68d5cf746b21660b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43259feeeb896997e760df92f77b05dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
SetFileAttributesA
GlobalUnlock
ReadConsoleOutputCharacterA
GlobalAlloc
GetVersionExA
GlobalFree
VirtualAlloc
GlobalLock
GetThreadLocale

tapi32

lineSetCallData

user32

InsertMenuItemW
GetWindow
ReuseDDElParam

Exports

Exports

WriteYrmlmuqbpe
InitNsbgmkba

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ