a98b979367b11ee001a7076f50b57927_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a98b979367b11ee001a7076f50b57927_JaffaCakes118
Size

45KB
MD5

a98b979367b11ee001a7076f50b57927
SHA1

ed81b01cf6fbea3d471eb734173d90ea0146b96e
SHA256

4af54aa40d944561d21d1dd53193fb6aa32e1f0080bec6148358a995a19125df
SHA512

bde05e63a12512fe3f3c0779931242d860c94823b914c29ca9769372ffdfe85c871e10733fbbff94b43a8d169f82e614798154a58d5833c58c317fc64fa380e1
SSDEEP

768:uJZPLqypaQCNMhPoCCnSjCqs29iZFwC0e2wxxKXs:kcypaQCNMhgjSDKFpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a98b979367b11ee001a7076f50b57927_JaffaCakes118

Files

a98b979367b11ee001a7076f50b57927_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2d97fa54f329b44bd731992f7683d84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
UnmapViewOfFile
VirtualAlloc
LoadLibraryA
CreateFileMappingA
GetCommandLineA
GetModuleHandleA
MapViewOfFileEx
CreateFileA

user32

DialogBoxParamA
LoadIconA
LoadCursorA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ