3d9b120708c9d4f8732619bdb83cb90d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d9b120708c9d4f8732619bdb83cb90d_JaffaCakes118
Size

47KB
MD5

3d9b120708c9d4f8732619bdb83cb90d
SHA1

a1a8c095f6b88bcaa75579c5d8509659cf73613e
SHA256

cd3c27da3aec665bcf12b5e5d03adb6ee8eca1f61ace68421ca586d86847f8df
SHA512

751dbda8497fa49d40ee96ec05f52ee61b87c70dffd4523872748d5c378a29deebf5b3b4ed75afcb0aeb1669b31cbb32efd7891f3488b6e13fdf162127ac5e05
SSDEEP

768:OmFXYDHFlVD20CbDhN5GcF0juVA8IBwV4qIDC/39f:OSoDHbVDg7UfjuVl5Vf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9b120708c9d4f8732619bdb83cb90d_JaffaCakes118

Files

3d9b120708c9d4f8732619bdb83cb90d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

78a0ee33ff47711c51f5fea1c9b43dae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
GetProcAddress

user32

GetMenuState
EnableMenuItem

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT5
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ