3e7e1067451865d53c765039b3d7f57a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e7e1067451865d53c765039b3d7f57a_JaffaCakes118
Size

30KB
MD5

3e7e1067451865d53c765039b3d7f57a
SHA1

5635c0fe9570d44ab9b73a3206bcbf0ff364cb09
SHA256

11aec0b759c1862fbfb8b18e89756b438ab54790d0ff983ec3370d5d30f08add
SHA512

df3a8141efdffe34c7f536f25e3eab5c6c65e398496be6e218a24035fc42fb04f3df50ea80c51413f51cfaedfe0209d73ce6da4eb4ae6a011f5038b3dd54fa38
SSDEEP

768:6GiE04EszzJQJ0h1CwPVwaZPo36pXTjW2SlFdPvY:6Gi3TszCJ0h1C2wYo3UuXFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e7e1067451865d53c765039b3d7f57a_JaffaCakes118

Files

3e7e1067451865d53c765039b3d7f57a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6c00ab524c9718fe9ed406393f090a54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WINNLSGetEnableStatus
EnumDisplaySettingsA
VkKeyScanExW
GetFocus
GetActiveWindow
CharToOemA
GetClipboardViewer

shlwapi

SHRegisterValidateTemplate
PathStripToRootA
UrlIsW
SHReleaseThreadRef
SHReleaseThreadRef

kernel32

VirtualProtect
GetStartupInfoA
LoadLibraryA
ExitProcess

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 845B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE