3bba3abe478389b2b7a837711dfccc2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bba3abe478389b2b7a837711dfccc2a_JaffaCakes118
Size

50KB
MD5

3bba3abe478389b2b7a837711dfccc2a
SHA1

86fb72094ba0748c3d9d773923e70b9db16f927d
SHA256

c39a6372a8c2027950022782bf50b37d00c3e4b1318cd5bfa0331ee344f99524
SHA512

965b367e21bbb56ce1100aadce9d41cb5e75b299b4a7642052bb842394758755fb128e782bdd0955584ead3cb12b17fa8d01fbe2d2e98dff79a67f88df73614e
SSDEEP

768:Mxgm+d1z8BXAqxwYE9Sb+7RFpvLXuZr32BBaAriUFE0tFmvDRtCkC5HVYPCUu:IJkEwYCvNFxLXKyBhXm0tFmvDkHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bba3abe478389b2b7a837711dfccc2a_JaffaCakes118

Files

3bba3abe478389b2b7a837711dfccc2a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ