4528dafec705e3c21e34ca1318b1d951_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4528dafec705e3c21e34ca1318b1d951_JaffaCakes118
Size

116KB
MD5

4528dafec705e3c21e34ca1318b1d951
SHA1

51e20328946cc9d929a1478f04b300c86be4c06b
SHA256

06bf6f059f989a801c3b279da61a373017b48cf6e45b3d2465d15285f2f5faa1
SHA512

0031dfeaa864874bea174acd3839acd86535047796655e2a7517b920388f9a52d220cd8510577426aa00014ac5094a6622bb791deb9b2a618cb9799a72f90a8c
SSDEEP

1536:32VQEK4u+AHGKBT+abudI6UNQrq09gWwJqQXnT0wVj2Asdft1fDV0PraRlh0mS:3kM1pw2razCMwVj2Dd/fDmP+Phu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4528dafec705e3c21e34ca1318b1d951_JaffaCakes118

Files

4528dafec705e3c21e34ca1318b1d951_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28ae933ebf35432837e8efff6d831de0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCurrentThread
LoadLibraryA
GetFileType
GetProcAddress
GetCurrentDirectoryA
GetVersionExA
CloseHandle
GetVersion
GetModuleHandleA
LocalFree

user32

EndPaint
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
GetMessageA
BeginPaint

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ