ab10efe253d4262298e493d79b13308f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab10efe253d4262298e493d79b13308f_JaffaCakes118
Size

47KB
MD5

ab10efe253d4262298e493d79b13308f
SHA1

818866e34fa7598feaf4f6ff5fcdeaa4fc719a6b
SHA256

1d22ffbcfa1c6dedd473d5f5a2e630cb2fba4af7fa8f41ea1b1a76e812a85f90
SHA512

d885d443a2b13bca2860ad2a7b87cec5a317bda9e2ecc5cbe9cc333259fd3b2fee3d159a7f4df2a01541ca002354567e301be42898ff5b18e620509b7f671b82
SSDEEP

768:3i/eq5WPOAQwvFC88BGCRq8cF1EPOCDFS3hUA+IG:ceqIRQEFT2GeP5hS3OA+IG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab10efe253d4262298e493d79b13308f_JaffaCakes118

Files

ab10efe253d4262298e493d79b13308f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9abfaeae201072e8744840bf3033cd9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
GetModuleHandleA
GetProcAddress

user32

GetMenuState
EnableMenuItem

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT5
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ