71b80069fc257655c415518461dacd16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b80069fc257655c415518461dacd16_JaffaCakes118
Size

16KB
MD5

71b80069fc257655c415518461dacd16
SHA1

de569c86b8a924f1ef24f9f9e18709265a2d74d3
SHA256

f4f5180bf3d0ed52e7c290393d697b44f88f75f82a7eb2cf016ea82895b5ad37
SHA512

f403a2709cab3501281d544e0ee12101cdd6bff3586a2a166ad1b01593730cc5e0db21d91f80349d578a5bf11481a2725755dec372ce4366786701b6ed495ad9
SSDEEP

192:0ZeXQVdNAj2nK+aE15BNVb04R08ZCkgHfLDMUvPVYJFfUujHijGdcV9QvCxr:0Zz8CK015XV3HCkCX5vPVYPCiOmk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b80069fc257655c415518461dacd16_JaffaCakes118

Files

71b80069fc257655c415518461dacd16_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5d4c65057d53d17a227df82239e19e77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyW
RegOpenKeyA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ