681ff5f0dfc9c647400eaa152536aef0_JaffaCakes118 | Triage

Sharing

General

Target

681ff5f0dfc9c647400eaa152536aef0_JaffaCakes118
Size

42KB
MD5

681ff5f0dfc9c647400eaa152536aef0
SHA1

a912f7ada09b8f52fa1c87bcfaca0661b2a965b9
SHA256

bdc6c92e338b21c7b7f025d3b21b6100acfeadce997148f074393208f9fbce0d
SHA512

121e359e0808d00f98e6ef7e5315f419b0fef4f148663af93dc431c3b9adca986a9d7f93ba69d1b8912c21ecca9e39db4a48ea4c8b55f292c99075fc262ef9f1
SSDEEP

768:lAZ8Wemj9pnRoI/MBhsSYQRvHodlWSCkC5HVYPClZ:lAZ8Wemx90BhsSxgdlW7HyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
681ff5f0dfc9c647400eaa152536aef0_JaffaCakes118

Files

681ff5f0dfc9c647400eaa152536aef0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5d4c65057d53d17a227df82239e19e77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyW
RegOpenKeyA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ