a5dfa077dc80706dd061bddf737c2470_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5dfa077dc80706dd061bddf737c2470_JaffaCakes118
Size

46KB
MD5

a5dfa077dc80706dd061bddf737c2470
SHA1

136eca88a0ef5a54b9a04eb0d60008aa6a0bef14
SHA256

c0dfe11117001a2908c260decd2495a9fc94163a53e42792a6299b5007e5e0aa
SHA512

73df042d0e751dccad799046ee7ea38fdaec149d3ded8a7e5999154f85c18dca731f8d5a935fd03120f6cf29762d091c86b65a6886bf638c0bf95690bcb2c741
SSDEEP

768:+7B4x8ZVtFKhcEELw5p2opzapKKCkC5HVYPCf:AB8UTKhVWITHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5dfa077dc80706dd061bddf737c2470_JaffaCakes118

Files

a5dfa077dc80706dd061bddf737c2470_JaffaCakes118
.exe windows:5 windows x86 arch:x86

68f267c7e57e4425fcdd7a0663a28d47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnableWindow
EnumChildWindows
EndPaint
EndMenu
DialogBoxParamW
EndDeferWindowPos
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDialog

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ