78e05dfa0fb9500e80bbfabbc4df350d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78e05dfa0fb9500e80bbfabbc4df350d_JaffaCakes118
Size

543KB
MD5

78e05dfa0fb9500e80bbfabbc4df350d
SHA1

651593e608e9acbf51d3316fa72c4c4fa3e38095
SHA256

1da5be96c8d2a22ec898582557979be889f6c2b689db9bed1a7e3fff51751353
SHA512

10b6ffc81643c33e857650dfb74fa9098cb6dd3326c252d01d8e64b92004e40189ae10c583f31ed9753bbfcb4d3e8705a3a1524609f620adcf29e1fc322cecb7
SSDEEP

12288:Lx9nVM3J8UP/g4AHxwy/0xX+/9JeteDLFol:L/U8CId2y8X+/9JeEDx4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e05dfa0fb9500e80bbfabbc4df350d_JaffaCakes118

Files

78e05dfa0fb9500e80bbfabbc4df350d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af40143f8c087ccfde86eb8461605475

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

IsChild

advapi32

RegCloseKey

comctl32

CreateStatusWindowA

shell32

SHChangeNotifyRegister

mscoree

_CorExeMain

Sections

.pdata
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE