63a71b1d0f4a49b3bb06d9d90ea5f106_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63a71b1d0f4a49b3bb06d9d90ea5f106_JaffaCakes118
Size

50KB
MD5

63a71b1d0f4a49b3bb06d9d90ea5f106
SHA1

f79c3e285a2ac65f4e1873f492729e7cc959fcd7
SHA256

bb447a90f0be11d0dc4dc9e1b8e7f19269c44bcb87ec985761d813eca37e9bf1
SHA512

8b02b8f2e0b25b2aa984b0c308fa96631691e4f5da90400cab0afd1d84e5213e14b6209d813df30950716dd7004b5d7fd1815f2bc9561e8265f9e2ee1948f2f1
SSDEEP

768:k9uusVVzsBYqxwZCaiLy7RFpvLXuZr32BBaAriUFE0tFmvDRzCkC5HVYPCP:MrG8wiLyNFxLXKyBhXm0tFmvD6HyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63a71b1d0f4a49b3bb06d9d90ea5f106_JaffaCakes118

Files

63a71b1d0f4a49b3bb06d9d90ea5f106_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ